PHP safe_mode protection bypass
Published:		21.11.2008
Source:		BUGTRAQ
SecurityVulns ID:		9444
Type:		local
Level:		5/10
Description:		It's possible to bypass protection with ini_set("error_log", "/hack/");

Affected:

PHP : PHP 5.2

Original document

Maksymilian Arciemowicz, SecurityReason : PHP 5.2.6 (error_log) safe_mode bypass (21.11.2008)

Discuss:

Read or add your comments to this news (0 comments)