TUCoPS :: Web :: Apache :: web4925.htm

PHP/Apache page source disclosure
18th Dec 2001 [SBWID-4925]
COMMAND

	PHP/Apache page source disclosure

SYSTEMS AFFECTED

	Tested on PHP/4.0.4 installed on Win ME running Apache/1.3.20

PROBLEM

	Bill Q found that PHP/4.0.4 installed on Win  ME  running  Apache/1.3.20
	will disclose php source if the url is entered with  pounds  surrounding
	the dot.
	

	http://server.com/phpfile#.#php

	

	

	Not tested against other PHP/Apache/Windows version.

SOLUTION

	Nothing Yet, as bug is not fully qualified.

TUCoPS is optimized to look best in Firefox® on a widescreen monitor (1440x900 or better).
Site design & layout copyright © 1986-2024 AOH