[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [cobalt-users] PHP able to browse all dirs

Mevers Automatisering - Mevershosting.nl wrote:

Dear all,

I found out that PHP is able to browse all dirs on our Raq4.

It was even able to create and read all (YES ALL) files on the server.



php is able to browse all directorys but php is not able to read all files!

<?php
system("cat /etc/shadow >test.txt");
readfile("test.txt");
?>

this script shows an empty result file ...
(tested on raq4)

stefan bauckmeier