diff --git a/vulnerabilities/exec/source/medium.php b/vulnerabilities/exec/source/medium.php index 34f03367c..2afbb85bb 100644 --- a/vulnerabilities/exec/source/medium.php +++ b/vulnerabilities/exec/source/medium.php @@ -15,12 +15,12 @@ // Determine OS and execute the ping command. if( stristr( php_uname( 's' ), 'Windows NT' ) ) { - // Windows - $cmd = shell_exec( 'ping ' . $target ); +// Windows + $cmd = shell_exec( 'ping ' . escapeshellarg($target) ); } else { // *nix - $cmd = shell_exec( 'ping -c 4 ' . $target ); + $cmd = shell_exec( 'ping -c 4 ' . escapeshellarg($target) ); } // Feedback for the end user