E04-dpi01
CVSS:
10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)
False Positive:
f
Variants:
1
Year:
2004
Description
This strike exploits an input validation flaw in the PHP escapeshellcmd() function on the Windows platform.
This strike sends a web request that attempts to execute the ipconfig system command using this vulnerability.