Month of PHP Bugs - Day 10

Day 10 of the Month of PHP Bugs brings a new PHP vulnerability which occurs when using ext/filter and ASCII data. This raises the vulnerability count to 18.

  1. PHP ext/filter HTML Tag Stripping Bypass Vulnerability When ext/filter is configured to strip characters with low ASCII values it is possible to bypass the HTML tag filter in an easy way.


Share This

If you enjoyed this post, make sure you subscribe to my RSS feed!



Thank you for reading this post. You can now Leave A Comment (0) or Leave A Trackback.

Post Info

This entry was posted on Monday, March 12th, 2007 and is filed under Month Of PHP Bugs.

You can follow any responses to this entry through the Comments Feed. You can Leave A Comment, or A Trackback.



Previous Post: Top 5 Web Exploits for February 2007 »
Next Post: Watchfire Certified as PCI Security Standards Council Approved Scanning Vendor »

Read More

Related Reading:

Latest Posts:


Leave a Reply

Note: Any comments are permitted only because the site owner is letting you post, and any comments will be removed for any reason at the absolute discretion of the site owner.

Close
E-mail It