ended7월 17일· 1 sources
HackTheBox : Void Whispers Writeup
Why it matters
Summary The "Void Whispers" mail-settings panel passes the user-supplied sendMailPath field directly into shell_exec("which $sendMailPath") with no escaping. The app only filters literal whitespace, w...
1
Sources
+0
24h
—
Growth
7d
Active