what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 1 of 1

Files

Hardened-PHP Project Security Advisory 2005-18.77

Posted Nov 1, 2005

Authored by Stefan Esser, Hardened-PHP Project | Site hardened-php.net

A weakness in PHP's phpinfo() function allows for cross site scripting attacks. Affected versions are PHP4 versions 4.4.0 and below and PHP5 versions 5.0.5 and below.

tags | advisory, php, xss

SHA-256 | 36fa6835dbeb10584c5e0f7fa40b5dfc12ef31a054c790a4bd79c93d91e4cddb

Download | Favorite | View

Related Files

phpinfoXSS.txt

Posted Nov 4, 2005

Proof of concept code showing the simple syntax needed to exploit the cross site scripting vulnerability in phpinfo.php for PHP versions 4.4.0 and below and 5.0.5 and below.

tags | exploit, php, xss, proof of concept

SHA-256 | df410a755e0237e3e4f3fb77b4b9b431dc74d3c5756c946f73da426fd1261a7d

Download | Favorite | View