Skip to main content
3 of 3
Reword to improve focus.
multithr3at3d
  • 13.2k
  • 3
  • 34
  • 45

Can a user hack a server running apache from a website

Is it possible that a user can hack a server running Apache httpd from the website it hosts? Let's say I have a PHP web application running under Apache with explicit user www-data in the virtual host configuration. If the user hacks the website, he would only have access to modify the PHP code, since he only has the privileges of the www-data user.

Could the attacker leverage this limited access to reach user or system files, effectively taking control of the operating system?