hunter
Joined: 17 Jan 2006
Posts: 7
|
 Posted: Wed Aug 30, 2006 8:27 am Post subject: Important info regarding possible forum exploit |
 |
|
Recently, on several security forums, one possible Zonemetrics forum vulnerability was published...
I find it important to inform you that this vulnerability is not that dangerous as, firstly, if ysomebody wants to exploit it, he must have exact file tree and correct name of the malicious script because that variable is never used alone but always in concatanation with script name and generic extension and, secondly, if site has register_globals set to OFF, one cannot use this exploit at all...
So, recommendation for all Zonemetrics users is very simple - if you ar using any Zonemetrics version, simply make sure that register_globals is set to OFF and you have nothing to worry about... |
|
