Bugtraq mailing list archives

Re: Security Advisory - #1


From: Dmitry Guyvoronsky <demiurg () altaee com>
Date: Fri, 8 Feb 2002 09:28:33 +0200


PB> Details : By appending /123 to the end of a PHP file such as
PB> http://somehost/database.php/123 the PHP program will return its install
PB> path:
PB>  The following message is displayed : Premature end of script headers:
PB> C:/php/php.exe


This message is shown only if PHP installed as stand-alone CGI module.
In case of installation as web Apache module, "/123" will be simply
stored in global variable $PATH_INFO

-- 
With best regards,
Dmitry Guyvoronsky


Current thread: