OSVDB ID: 7252 Title: phpmyfamily register_globals Setting Privilege Escalation |
Info |
|
|
Dates |
||||
|
|
Description |
phpmyfamily contains a flaw that may allow a remote attacker gain elevated privileges. The issue is due to the php.ini file being configured so "register_globals" is ON. In such a configuration, a remote attacker can gain access to the phpmyfamily system with 'nobody' access which will allow most standard user functions. |
Classification |
Location:
Remote / Network Access
Attack Type: Misconfiguration Impact: Loss of Confidentiality, Loss of Integrity Exploit: Exploit Public Disclosure: OSVDB Verified OSVDB: Web Related |
Solution |
Upgrade to version 1.3.1 or higher, as it has been reported to fix this vulnerability. It is also possible to correct the flaw by implementing the following workaround: turn "register_globals" OFF |
Products |
|
References |
|
Credit |
|
users.sourceforge.net -