£Á°èZ¨Ä…–K§‚«“ô4“ÒÙ´dîfUÙÃÅ WKbyʦ•êŽ…È®FÒ¿ÊÎóCozá¬S@6{Í:›œêZÌ:Š•_%:¢¾¾~;‘Ã~芩ÊǍí`ÔÑ©ú뙵'5I¿fš×WO%ø9¾«¾DK|€ùÍD”Ýs]nHÕ¶êםӼ㞪éUWŸÈË%DÒÕ¬ï‘]/Åcx ‰ï2ß]ä6G[]S£Ôϯrs{úëóµmÒï#UQxo·õÞCe]"±/aÙ&Eã4ú9Jé_ÞåëdãöKë)AÞ ¯¹ægƒÛowЍø^d™ý½ßB7áyMä9ÜÖUã !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! --TEST-- Bug #77153 (imap_open allows to run arbitrary shell commands via mailbox parameter) --EXTENSIONS-- imap --CONFLICTS-- defaultmailbox --FILE-- " . __DIR__ . '/__bug'; $payloadb64 = base64_encode($payload); $server = "x -oProxyCommand=echo\t$payloadb64|base64\t-d|sh}"; @imap_open('{'.$server.':143/imap}INBOX', '', ''); // clean imap_errors(); var_dump(file_exists(__DIR__ . '/__bug')); ?> --EXPECT-- bool(false) --CLEAN--