Possible to run arbitrary PHP code on pipermail server

Remco remco47 at gmail.com
Fri Feb 20 17:21:15 CST 2009


I read the following e-mail on pipermail:
http://www.winehq.org/pipermail/wine-devel/2009-February/073428.html

Try downloading the PHP attachment from there; it will actually
execute and give you an HTML page. This could easily be abused!

Remco



More information about the wine-devel mailing list