Possible to run arbitrary PHP code on pipermail server
Feb. 20, 2009
5:21 p.m.
I read the following e-mail on pipermail: http://www.winehq.org/pipermail/wine-devel/2009-February/073428.html Try downloading the PHP attachment from there; it will actually execute and give you an HTML page. This could easily be abused! Remco
February 2009
5:27 p.m.
On Fri, Feb 20, 2009 at 4:21 PM, Remco <remco47(a)gmail.com> wrote:
I read the following e-mail on pipermail: http://www.winehq.org/pipermail/wine-devel/2009-February/073428.html
Try downloading the PHP attachment from there; it will actually execute and give you an HTML page. This could easily be abused!
Remco
Wow, that is really awesome and really scary at the same time. Attached is the same deal with a text extension, for your viewing pleasure. Erich Hoover ehoover(a)mines.edu
6290
Age (days ago)
6290
Last active (days ago)
1 comments
2 participants
participants (2)
-
Erich Hoover -
Remco