[greg-xxe@nest.cx: XXE (Xml eXternal Entity) attack]
| From: | Markus Fischer | Date: | Wed, 30 Oct 2002 01:28:15 +0000 |
| Subject: | [greg-xxe@nest.cx: XXE (Xml eXternal Entity) attack] | ||
| Groups: | php.soap | ||
| Request: | Send a blank email to php-soap+get-293@lists.php.net to get a copy of this message | ||
I catched this up on bugtraq today, maybe it is interesting
for PHP too.
Disclaimer: I know nothing (i.e. shit) about PHP's xmlrpc/soap
mechanism it uses, if this forward is bogus -> discard it ;)
- Markus
--
GnuPG Key: http://guru.josefine.at/~mfischer/C2272BD0.asc
$ grep docref_root php.ini
docref_root = "http://landonize.it/?how=url&theme=classic&filter=RichyH&user=imajes&url=http%3A%2F%2Fphp.net%2F/"