RE: php-ping: Executing arbritary commands

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

To: "ppp-design" <security@ppp-design.de>, <bugtraq@securityfocus.com>, <full-disclosure@lists.netsys.com>
Subject: RE: php-ping: Executing arbritary commands
From: "Golden_Eternity" <bugtraq@bhodisoft.com>
Date: Mon, 29 Dec 2003 14:45:48 -0800
Importance: Normal
In-reply-to: <3FF03F5C.3060306@ppp-design.de>

> Temporary-Fix
> -------------
> Replace
> If ($count > $max_count)
> with
> If ($count > $max_count && !is_numeric($count))

Shouldn't that be '||' instead of '&&'?

-G_E

Follow-Ups:
- Re: php-ping: Executing arbritary commands
  - From: ppp-design

References:
- php-ping: Executing arbritary commands
  - From: ppp-design

Prev by Date: Re: php-ping: Executing arbritary commands
Next by Date: Re: Gallery v1.3.3 Cross Site Scripting Vulnerabillity
Previous by thread: php-ping: Executing arbritary commands
Next by thread: Re: php-ping: Executing arbritary commands
Index(es):
- Date
- Thread

[Index of Archives] [Linux Security] [Netfilter] [PHP] [Yosemite News] [Linux Kernel]

Powered by Linux