note 76063 deleted from function.xslt-process by sobak
| From: | sobak@php.net | Date: | Thu, 24 Nov 2016 11:52:48 +0000 |
| Subject: | note 76063 deleted from function.xslt-process by sobak | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-207552@lists.php.net to get a copy of this message | ||
Note Submitter: anonymous
----
It is possible that the xslt_process call can expose information about Apache's installation
location if null values are passed to the signature.
for example:
<?php
$xslt = xslt_create();
$result = xslt_process($xslt, null, null);
echo $result;
?>
The error you will recieve is:
Warning: Sablotron error on line none: cannot open file 'C:\Program Files\Apache
Group\Apache2/' in C:\webroot\htdocs\projects\www\sales\test.php on line 4
Although trying to read a 'null' XML file and 'null' XSL stylesheet are rather
silly, consider an attacker tries to upload an arbitrary file and execute it with similar code.
the user may then gain enough information to attack your site.