Possible to run arbitrary PHP code on pipermail server
Feb. 20, 2009
11:21 p.m.
I read the following e-mail on pipermail: http://www.winehq.org/pipermail/wine-devel/2009-February/073428.html Try downloading the PHP attachment from there; it will actually execute and give you an HTML page. This could easily be abused! Remco
February 2009
11:27 p.m.
On Fri, Feb 20, 2009 at 4:21 PM, Remco <remco47(a)gmail.com> wrote:
I read the following e-mail on pipermail: http://www.winehq.org/pipermail/wine-devel/2009-February/073428.html
Try downloading the PHP attachment from there; it will actually execute and give you an HTML page. This could easily be abused!
Remco
Wow, that is really awesome and really scary at the same time. Attached is the same deal with a text extension, for your viewing pleasure. Erich Hoover ehoover(a)mines.edu
6244
Age (days ago)
6244
Last active (days ago)
1 comments
2 participants
participants (2)
-
Erich Hoover -
Remco