phpMyAdmin 2.1.0 + world readable (apache) log files enable remote user to run arbitrary PHP Codes as apache user.

Note : sorry for my pity english. First of all, i want to ask a question, is it normal that if, in a MySQL query -via PHP-, i put "select from $table" . "files where ID=1" and i post table="atable ", MySQL consider the new query as a valid one so the final query will be "select from atable" ? It'...

The ht:Dig Group ht:Dig 3.1.13.1.23.1.33.1.43.2 .0b1 - Arbitrary File Inclusion

The ht:Dig Group ht:Dig 3.1.13.1.23.1.33.1.43.2 .0b1 - Arbitrary File Inclusion source: https://www.securityfocus.com/bid/1026/info ht://dig is a web content search engine for Unix platforms. The software is set up to allow for file inclusion from configuration files. Any string surrounded by the...