OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Paul Brereton (brereton_paulbtopenworld.com)
Date: Thu Feb 07 2002 - 05:59:50 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    Title : Windows Based PHP Leaks True Path
    Author : Paul Brereton
    E-Mail : brereton_paulbtopenworld.com

    Summary : PHP for Windows reveals the true path where the program was
    installed. This would be considered in most cases sensitive information.

    Details : By appending /123 to the end of a PHP file such as
    http://somehost/database.php/123 the PHP program will return its install
    path:
     The following message is displayed : Premature end of script headers:
    C:/php/php.exe

    Regards,

    Paul Brereton.