info
discussion
exploit
solution
references
PHP cURL Encoded NULL Character Safe_Mode Restriction Bypass Vulnerability
References:
PHP ext/curl/interface.c revision log
(PHP)
PHP Homepage
(PHP)
revision 1.62.2.15
(PHP)
cURL Safe Mode Bypass PHP 4.4.2 and 5.1.4
(cxib@securityreason.com)
Privacy Statement
Copyright 2010, SecurityFocus