How I could've taken over the production server of a Yahoo acquisition through command injection

Published

2017-06-04 00:00

Collected

2026-08-18 01:13

---
id: 6581
title: "How I could've taken over the production server of a Yahoo acquisition through command injection"
source_domain: samcurry.net
source_url: "https://samcurry.net/how-i-couldve-taken-over-the-production-server-of-a-yahoo-acquisition-through-command-injection"
published_at: "2017-06-04T00:00:00Z"
tags: ["ai-security", "bug-bounty", "rce", "reconnaissance", "web-security", "command-injection", "yahoo", "samcurry-net"]
phying_url: "https://phying.com/item/6581"
lang: en
---

# How I could've taken over the production server of a Yahoo acquisition through command injection

## Summary

Following a banned researcher's trail, Sam Curry found a getImg.php endpoint on a Yahoo acquisition where command injection in image handling could have taken over the production server.

## Intelligence Metadata

- **Sources:** samcurry.net
- **Published:** 2017-06-04T00:00:00Z
- **Original:** https://samcurry.net/how-i-couldve-taken-over-the-production-server-of-a-yahoo-acquisition-through-command-injection
- **Phying News:** https://phying.com/item/6581