RE: php-ping: Executing arbritary commands

To: "ppp-design" <security@xxxxxxxxxxxxx>, <bugtraq@xxxxxxxxxxxxxxxxx>, <full-disclosure@xxxxxxxxxxxxxxxx>
Subject: RE: php-ping: Executing arbritary commands
From: "Golden_Eternity" <bugtraq@xxxxxxxxxxxxx>
Date: Mon, 29 Dec 2003 14:45:48 -0800
Importance: Normal
In-reply-to: <3FF03F5C.3060306@xxxxxxxxxxxxx>
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm

> Temporary-Fix
> -------------
> Replace
> If ($count > $max_count)
> with
> If ($count > $max_count && !is_numeric($count))

Shouldn't that be '||' instead of '&&'?

-G_E

Follow-Ups:
- Re: php-ping: Executing arbritary commands
  - From: ppp-design

References:
- php-ping: Executing arbritary commands
  - From: ppp-design

Prev by Date: Re: php-ping: Executing arbritary commands
Next by Date: Re: Gallery v1.3.3 Cross Site Scripting Vulnerabillity
Previous by thread: php-ping: Executing arbritary commands
Next by thread: Re: php-ping: Executing arbritary commands
Index(es):
- Date
- Thread