Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
BugTraq
Name:
Email:
*Note: Email address will appear as "user domain ext" to prevent harvesting.
Subject:
Message:
 
File reading vulnerable in PHP and MySQL (Local Exploit) Nov 26 2002 10:57AM
Hai Nam Luke (hainamluke hotmail com)


Attacker can use PHP and mySQL to read some local file following this way:

# Create a database (mySQL) and upload this file to your server

PHP Code: viewfile.php (programmed by Luke)

======================================================

<?

// config this data

$dbhost = "";

$dbuser = ""...

[ more ]  




 

Privacy Statement
Copyright 2009, SecurityFocus