↧
Par : __ed
Could you be more accurate on which version is affected by this vulnerability ? Thanks.
View ArticlePar : Krzysztof Kotowicz
Hi! I’m the original reporter. The description of this vulnerability is wrong – you can create a file in root directory with arbitrary name & contents, not delete it. @__ed As for the versions...
View ArticlePar : Krzysztof Kotowicz
Successful exploitability of this vulnerability is pretty hard as you need both a vulnerable application (though i’ve found a few in google code search) and a vulnerable php set up. I was able to find...
View ArticlePar : Krzysztof Kotowicz
Demo is here: http://blog.kotowicz.net/2011/06/file-path-injection-in-php-536-file.html
View Article