I'm trying to pentest a PHP script.
This is the last line of the script that I want to exploit:
Header("Location: ".TOP_DIR."/".base64_decode($_GET['ref'])."&imgid=".$_GET['imgid']);
Is it vulnerable to remote code execution? If so, I want to run the system
function inside the base64_decode
function:
system($_GET['cmd'])
Is it possible?
system
inside base64 decode function"? Issystem($_GET['cmd'])
code that is present already, or is that your desired payload? Could you give us a more complete view of the code you are trying to exploit? – Anders Jul 11 '16 at 7:52system($_GET['cmd'])
! – I'm V Jul 11 '16 at 15:01base64_decode
does not execute any code, so it seems impossible to me. – Anders Jul 11 '16 at 15:11