CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 10.0. Its EPSS score suggests a 31.1% probability of exploitation in the next 30 days. It may be remotely exploitable.
CVE
CVE-2004-0542
Severity
HIGH
CVSS
10
EPSS
31.11%
Original NVD Description
PHP before 4.3.7 on Win32 platforms does not properly filter all shell metacharacters, which allows local or remote attackers to execute arbitrary code, overwrite files, and access internal environment variables via (1) the "%", "|", or ">" characters to the escapeshellcmd function, or (2) the "%" character to the escapeshellarg function.