Re: Security Advisory - #1

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 




PB> Details : By appending /123 to the end of a PHP file such as
PB> http://somehost/database.php/123 the PHP program will return its install
PB> path:
PB>  The following message is displayed : Premature end of script headers:
PB> C:/php/php.exe


This message is shown only if PHP installed as stand-alone CGI module.
In case of installation as web Apache module, "/123" will be simply
stored in global variable $PATH_INFO

-- 
With best regards,
Dmitry Guyvoronsky


[Index of Archives]     [Linux Security]     [Netfilter]     [PHP]     [Yosemite News]     [Linux Kernel]

  Powered by Linux