Bug #74238 [NEW]: pt2.php.net subdomain takeover

From: is4curity at gmail dot com Operating system: PHP version: Irrelevant Package: Other web server Bug Type: Bug Bug description:pt2.php.net subdomain takeover Description: ------------ hello your subdomain pt2.php.net pointing to php.dominios.pt https://mxtoolbox.com/SuperTool.aspx?action=cname%3apt2.php.net&run=toolpage pt2.php.net. IN CNAME php.dominios.pt and its expire or you can go to here https://my.dominios.pt/orderdomain.php?action=checkAvailability&directForm=1&domains=php&tld%5b%5d=.dominios.pt check about domain php.dominios.pt its Available hacker can register it the domain can claim by anyone so u must delete cname or register the domain again see the photo https://image.ibb.co/b4oUtv/cname.png https://image.ibb.co/n8AaYv/domain_checker.png thanks Expected result: ---------------- the hacker if he register the domain he will add contents he can hack the pt2.php.net vistor -- Edit bug report at https://bugs.php.net/bug.php?id=74238&edit=1 -- Try a snapshot (PHP 5.4): https://bugs.php.net/fix.php?id=74238&r=trysnapshot54 Try a snapshot (PHP 5.5): https://bugs.php.net/fix.php?id=74238&r=trysnapshot55 Try a snapshot (trunk): https://bugs.php.net/fix.php?id=74238&r=trysnapshottrunk Fixed in SVN: https://bugs.php.net/fix.php?id=74238&r=fixed Fixed in release: https://bugs.php.net/fix.php?id=74238&r=alreadyfixed Need backtrace: https://bugs.php.net/fix.php?id=74238&r=needtrace Need Reproduce Script: https://bugs.php.net/fix.php?id=74238&r=needscript Try newer version: https://bugs.php.net/fix.php?id=74238&r=oldversion Not developer issue: https://bugs.php.net/fix.php?id=74238&r=support Expected behavior: https://bugs.php.net/fix.php?id=74238&r=notwrong Not enough info: https://bugs.php.net/fix.php?id=74238&r=notenoughinfo Submitted twice: https://bugs.php.net/fix.php?id=74238&r=submittedtwice register_globals: https://bugs.php.net/fix.php?id=74238&r=globals PHP 4 support discontinued: https://bugs.php.net/fix.php?id=74238&r=php4 Daylight Savings: https://bugs.php.net/fix.php?id=74238&r=dst IIS Stability: https://bugs.php.net/fix.php?id=74238&r=isapi Install GNU Sed: https://bugs.php.net/fix.php?id=74238&r=gnused Floating point limitations: https://bugs.php.net/fix.php?id=74238&r=float No Zend Extensions: https://bugs.php.net/fix.php?id=74238&r=nozend MySQL Configuration Error: https://bugs.php.net/fix.php?id=74238&r=mysqlcfg