Php OS Command Injection Vulnerability

Php OS Command Injection Vulnerability
Php OS Command Injection Vulnerability

Release date:
Updated on:

Affected Systems:

PHP

Description:

Bugtraq id: 75290
CVE (CAN) ID: CVE-2015-4642

PHP is a widely used scripting language. It is especially suitable for Web development and can be embedded into HTML.

PHP has the OS command injection vulnerability. Attackers can exploit this vulnerability to execute arbitrary OS commands in the context of the affected application.

<* Source: [email protected]
*>

Suggestion:

Vendor patch:

PHP
---
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://www.php.net/downloads.php

This article permanently updates the link address: