Timeline for Is it possible to execute a php script in an image file?
Current License: CC BY-SA 3.0
5 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Oct 21, 2018 at 12:54 | comment | added | magallanes | How many times does a developer call require($someImage);?. | |
| Mar 31, 2013 at 18:03 | vote | accept | open source guy | ||
| Mar 22, 2013 at 13:34 | comment | added | SDC |
+1. This seems to me to be the most likely attack vector in this case. If you have another page that does an include() or require() where the filename can be manipulated by the caller, all he has to do is work out how to call that. If your site displays PHP error messages, they may have given him clues as to how to proceed with this.
|
|
| Mar 21, 2013 at 8:58 | history | edited | GBC | CC BY-SA 3.0 |
deleted 2 characters in body
|
| Mar 21, 2013 at 8:53 | history | answered | GBC | CC BY-SA 3.0 |