Thread Rating:
  • 0 Vote(s) - 0 Average
  • 1
  • 2
  • 3
  • 4
  • 5
PROBLEM A critical vulnerability in GetSimple 3.3.15 ?
#15
To prevent certain files to be included by attack or remote scripts,
please read this article, especially the part with the function blockit(),
and the part on the bottom to prevent XSS-style attacks.

https://php.net/manual/en/function.get-i...-files.php

=====================================

And then there is also this strategy:

Check how many included files are there...

if(count(get_required_files()) < 2) { die(); }

Or how many minimum there should be rather than 2
Reply


Messages In This Thread
RE: A critical vulnerability in GetSimple 3.3.15 ? - by Felix - 2019-06-16, 02:17:28



Users browsing this thread: 1 Guest(s)