Bug #74238 [Asn->Csd]: pt2.php.net subdomain takeover

Edit report at https://bugs.php.net/bug.php?id=74238&edit=1 ID: 74238 Updated by: rasmus@php.net Reported by: is4curity at gmail dot com Summary: pt2.php.net subdomain takeover -Status: Assigned +Status: Closed Type: Bug Package: Other web server PHP Version: Irrelevant Assigned To: rasmus Block user comment: N Private report: N New Comment: I deleted the mirror. It will take a little while to propagate out. Previous Comments: ------------------------------------------------------------------------ [2017-03-14 11:22:30] nikic@php.net I've explicitly disabled the mirror and mailed the maintainer. ------------------------------------------------------------------------ [2017-03-14 11:03:41] krakjoe@php.net Rasmus would you mind having a look at this ? Maybe re-assign to someone more appropriate. ------------------------------------------------------------------------ [2017-03-12 07:15:56] is4curity at gmail dot com Description: ------------ hello your subdomain pt2.php.net pointing to php.dominios.pt https://mxtoolbox.com/SuperTool.aspx?action=cname%3apt2.php.net&run=toolpage pt2.php.net. IN CNAME php.dominios.pt and its expire or you can go to here https://my.dominios.pt/orderdomain.php?action=checkAvailability&directForm=1&domains=php&tld%5b%5d=.dominios.pt check about domain php.dominios.pt its Available hacker can register it the domain can claim by anyone so u must delete cname or register the domain again see the photo https://image.ibb.co/b4oUtv/cname.png https://image.ibb.co/n8AaYv/domain_checker.png thanks Expected result: ---------------- the hacker if he register the domain he will add contents he can hack the pt2.php.net vistor ------------------------------------------------------------------------ -- Edit this bug report at https://bugs.php.net/bug.php?id=74238&edit=1