Bugtraq mailing list archives

Re: WDT :-phpopenchat-3.0.* ($sourcedir) Remote File Inclusion Exploit

From: "Carsten Eilers" <ceilers-lists () gmx de>
Date: Fri, 8 Sep 2006 08:57:22 +0200

Hi Frank,

Frank Reißner schrieb am Fri, 8 Sep 2006 03:14:15 +0200:

You can bypass unset in php < 4.4.4 and < 5.14. :)


Yes. But that's a vulnerability in PHP, not in
whatever script make use of it.

Regards
  Carsten

--
Dipl.-Inform. Carsten Eilers
IT-Sicherheit und Datenschutz

<http://www.ceilers-it.de>

Current thread:

WDT :-phpopenchat-3.0.* ($sourcedir) Remote File Inclusion Exploit stormhacker (Sep 06)
- Re: WDT :-phpopenchat-3.0.* ($sourcedir) Remote File Inclusion Exploit Carsten Eilers (Sep 07)
  - AW: WDT :-phpopenchat-3.0.* ($sourcedir) Remote File Inclusion Exploit Frank Reißner (Sep 08)
    - Re: WDT :-phpopenchat-3.0.* ($sourcedir) Remote File Inclusion Exploit Carsten Eilers (Sep 11)