Serious PHP flaw
PHP which is a widely used scripting language for webpages has been found to have a serious vulnerability. The Inquirer is reporting on the announcement at hardened-php.net that the vulnerabilities are in the XML-RPC for PHP and PEAR XML-RPC libraries. This is apparently an eval() vulnerability similar to one earlier in the year.
The hardened-php project has developed a fix that removes the use of eval() from both libraries. The fix was developed with the maintainers of both libraries.
Popularity: 1% [?]
Similar Posts
- Exploits in the wild and other news
- Linux/Unix Bash scripted weblog
- Botnets and spyare
- Another critical IE flaw
- IE too dangerous to use?
