CVE-2004-2692

Severity: critical (CVSS 9.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.5% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2004-12-31 · updated 2026-06-16
Weakness: CWE-16

Description

The exec_dir PHP patch (php-exec-dir) 4.3.2 through 4.3.7 with safe mode disabled allows remote attackers to bypass restrictions and execute arbitrary commands via a backtick operator, which is not handled using the php_escape_shell_cmd function.

Affected products

Kyberdigi Labs Php-Exec-Dir: 4.3.2, 4.3.3, 4.3.4, 4.3.5, 4.3.6, 4.3.7

References

http://kyberdigi.cz/projects/execdir/english.html
http://seclists.org/fulldisclosure/2004/Jul/0347.html
http://seclists.org/fulldisclosure/2004/Jul/0350.html
http://seclists.org/fulldisclosure/2004/Jul/0357.html
http://secunia.com/advisories/11928
http://www.osvdb.org/7243
http://www.securityfocus.com/bid/10598
https://exchange.xforce.ibmcloud.com/vulnerabilities/16498
http://kyberdigi.cz/projects/execdir/english.html
http://seclists.org/fulldisclosure/2004/Jul/0347.html
http://seclists.org/fulldisclosure/2004/Jul/0350.html
http://seclists.org/fulldisclosure/2004/Jul/0357.html

Get alerted when CVE-2004-2692 or the next vulnerability affects your stack