Lucene search
+L

1 matches found

Friends Of PHP
Friends Of PHP
added 2012/11/28 10:4 a.m.11 views

local file access in `Client:send` via manipulation of `$protocol` argument

security fix: hardened the Client::send method against misuse of the $method argument issue 81. Abusing its value, it was possible to force the client to access local files or connect to undesired urls instead of the intended target server's url the one used in the Client constructor. This weakne...

6.1AI score
SaveExploits0Affected Software1
Rows per page
Query Builder