Multiple vulnerabilities in PHP 4/5
 

View Entire Article & Overview

Hardened-PHP Project
www.hardened-php.net
-= Security Advisory =-


Advisory: Multiple vulnerabilities within PHP 4/5
Release Date: 2004/12/15
Last Modified: 2004/12/15
Author: Stefan Esser [sesser@php.net]


Application: PHP4 <= 4.3.9
PHP5 <= 5.0.2
Severity: Several vulnerabilities within PHP allow local and remote execution of arbitrary code

Risk: Critical
Vendor Status: Vendor has released bugfixed versions.
References: http://www.hardened-php.net/advisories/012004.txt

Re: Multiple vulnerabilities in PHP 4/5
 

yep, very big news across PHP land. it especially makes forums such as phpBB, vBulletin, Invision, etc. vulnerable to attacks because of the loads of info ; or that might be the other vulnerability? :(