News Feed
Sections




News Archive
Looking for more information on how to do PHP the right way? Check out PHP: The Right Way

Christopher Kunz's Blog:
Hardened-PHP Advisory 22/2005 - phpSysInfo
November 14, 2005 @ 05:28:03

From This note on Christopher Kunz's blog today, there's a mention of the "Multiple vulnerabilities in phpSysInfo" that the Hardened-PHP Group posted yesterday on their site.

phpSysInfo is a PHP script that displays information about the host being accessed. It will displays things like Uptime, CPU, Memory, SCSI, IDE, PCI, Ethernet, Floppy, and Video Information.

A number of holes - all of them attributed to a rather crude (and unneeded) register_globals emulation - allow for arbitrary file inclusion, amongst other things.

I know that phpSysInfo is pretty widely spread (I know I used to use it pretty heavily), so this kind of thing could cause some pretty massive problems. To take care of the problem, you can check out the extended description for more information...

0 comments voice your opinion now!
security advisory phpsysinfo security advisory phpsysinfo


blog comments powered by Disqus

Similar Posts

Stefan Esser's Blog: CORE GRASP - PHP Tainted Mode

Secunia.com: Slackware update for PHP5

David Müller: Why URL validation with filter_var might not be a good idea

Zend Developer Zone: Zend Framework 1.7.5 Released (Security Fix)

SecurityReason: Three Advisories for PHP 5.2.4 (dl, iconv_substr & setlocale)


Community Events





Don't see your event here?
Let us know!


interview symfony framework tips voicesoftheelephpant deployment series library package opinion introduction list bugfix release community install laravel api podcast language

All content copyright, 2014 PHPDeveloper.org :: info@phpdeveloper.org - Powered by the Solar PHP Framework