Description

The escapeshellcmd API function in PHP before 5.2.6 has unknown impact and context-dependent attack vectors related to "incomplete multibyte chars."

Remediation

References

CVE-2008-2051

Related Vulnerabilities

Undertow Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') Vulnerability (CVE-2020-10687)

Lighttpd Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2007-4727)

WordPress Plugin eCommerce Product Catalog for WordPress Cross-Site Scripting (3.0.38)

PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2015-8874)

WordPress Plugin MiniCart SQL Injection (1.00.1)

Severity

Critical

Classification

CVE-2008-2051

Tags

Missing Update Known Vulnerabilities