[ironingboard]

Can someone tell me why the line

Code

$timearray = ($unixtime == 0) ? getdate() : getdate(`$unixtime`);

is vulnerable?

PHP Code


<?php
function unixToDosTIme($unixtime = 0)
{
        $timearray = ($unixtime == 0) ? getdate() : getdate(`$unixtime`);
        if($timearray['year'] < 1980){
           $timearray['year'] = 1980;
           $timearray['mon'] =  1; 
           $timearray['mday'] =  1; 
           $timearray['hours'] =  0;  
           $timearray['minutes'] =  0;
           $timearray['seconds'] =  0;
        }
        print($timearray['year']);
        
        return(($timearray['year'] - 1980) << 25)
                | ($timearray['mon'] << 21)
                | ($timearray['mday'] << 16)
                | ($timearray['hours'] << 11)
                | ($timearray['minutes'] << 5)
                | ($timearray['seconds'] >> 1);
}       

print sprintf("Dos time is %d\n", unixToDosTIme($_GET['time']));


?>

[Ampere]

I'm not really seeing why this is Vulnerable but i'm not a PHP Expert....Where are you seeing that it is Vulnerable?
A bit more information could help shine light on why exactly it is.