Description
PHP3 with safe_mode enabled does not properly filter shell metacharacters from commands that are executed by popen, which could allow remote attackers to execute commands.
Remediation
References
Related Vulnerabilities
MySQL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-8286)
WordPress Plugin Contact Form Email Cross-Site Scripting (1.1.49)
WordPress Plugin Relevanssi-A Better Search SQL Injection (3.2)
ATutor Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2015-1583)
Moodle Incorrect Authorization Vulnerability (CVE-2022-0984)