Bug #74238 [Asn]: pt2.php.net subdomain takeover

Edit report at https://bugs.php.net/bug.php?id=74238&edit=1 ID: 74238 Updated by: krakjoe@php.net Reported by: is4curity at gmail dot com Summary: pt2.php.net subdomain takeover Status: Assigned Type: Bug Package: Other web server PHP Version: Irrelevant Assigned To: rasmus Block user comment: N Private report: N New Comment: Rasmus would you mind having a look at this ? Maybe re-assign to someone more appropriate. Previous Comments: ------------------------------------------------------------------------ [2017-03-12 07:15:56] is4curity at gmail dot com Description: ------------ hello your subdomain pt2.php.net pointing to php.dominios.pt https://mxtoolbox.com/SuperTool.aspx?action=cname%3apt2.php.net&run=toolpage pt2.php.net. IN CNAME php.dominios.pt and its expire or you can go to here https://my.dominios.pt/orderdomain.php?action=checkAvailability&directForm=1&domains=php&tld%5b%5d=.dominios.pt check about domain php.dominios.pt its Available hacker can register it the domain can claim by anyone so u must delete cname or register the domain again see the photo https://image.ibb.co/b4oUtv/cname.png https://image.ibb.co/n8AaYv/domain_checker.png thanks Expected result: ---------------- the hacker if he register the domain he will add contents he can hack the pt2.php.net vistor ------------------------------------------------------------------------ -- Edit this bug report at https://bugs.php.net/bug.php?id=74238&edit=1