Possible to run arbitrary PHP code on pipermail server
20 Feb
2009
20 Feb
'09
11:21 p.m.
I read the following e-mail on pipermail: http://www.winehq.org/pipermail/wine-devel/2009-February/073428.html Try downloading the PHP attachment from there; it will actually execute and give you an HTML page. This could easily be abused! Remco
20 Feb
20 Feb
11:27 p.m.
On Fri, Feb 20, 2009 at 4:21 PM, Remco <remco47(a)gmail.com> wrote:
I read the following e-mail on pipermail: http://www.winehq.org/pipermail/wine-devel/2009-February/073428.html
Try downloading the PHP attachment from there; it will actually execute and give you an HTML page. This could easily be abused!
Remco
Wow, that is really awesome and really scary at the same time. Attached is the same deal with a text extension, for your viewing pleasure. Erich Hoover ehoover(a)mines.edu
6140
Age (days ago)
6140
Last active (days ago)
1 comments
2 participants
participants (2)
-
Erich Hoover -
Remco