CVE-2008-2051

Publication date 5 May 2008

Last updated 24 July 2024

Description

The escapeshellcmd API function in PHP before 5.2.6 has unknown impact and context-dependent attack vectors related to "incomplete multibyte chars."

Show unmaintained releases

For informational purposes only. We recommend not to cherry-pick updates. How can I get the fixes?

Package	Patch details
php5	Vendor: http://www.mandriva.com/security/advisories?name=MDVSA-2008:125 Debdiff: http://launchpadlibrarian.net/15065228/php5_5.2.4-2ubuntu5.2.debdiff Vendor: http://www.debian.org/security/2008/dsa-1572