Back to list
Name:
Email:
*Note: Email address will appear as "user domain ext" to prevent harvesting.
Subject:
Message:
PHP import_request_variables() arbitrary variable overwrite
Mar 08 2007 10:30PM
Stefano Di Paola (stefano dipaola wisec it)
PHP import_request_variables() arbitrary variable overwrite
Name Using import_request_variables() you can overwrite
$_* and $* (any php variable).
Systems Affected PHP >=4.0.7 <=5.2.1
Severity High
Vendor http://www.php.net/
Advisory ...
[ more ]
Privacy Statement
Copyright 2010, SecurityFocus
Name Using import_request_variables() you can overwrite
$_* and $* (any php variable).
Systems Affected PHP >=4.0.7 <=5.2.1
Severity High
Vendor http://www.php.net/
Advisory ...
[ more ]