Slashdot Mirror

← Back to Stories (view on slashdot.org)

PHP Vulnerabilities Announced

Posted by michael on from the rated-o-for-overtime dept.

Simone Klassen writes "The Hardened-PHP Project has announced several serious and according to them, easy-to-exploit vulnerabilities within PHP. A flaw within the function unserialize() is rated as very critical for millions of PHP servers, because it is exposed to remote attackers through lots of very popular webapplications. The list includes forum software like phpBB2, WBB2, Invision Board and vBulletin. It is time to upgrade now."

2 of 387 comments (clear)

  1. Re:I've said it before, and I'll say it again by Anonymous Coward · · Score: 5, Funny

    I assume you dislike PHP. What would you recommend instead?

    A language that is a little more practical for extracting and reporting.

    NB

  2. Re:No comment? by stevesliva · · Score: 5, Funny

    No, all the sysadmins are on holiday vacation. Come on folks, announcing security vulnerabilities on a Friday in December? That's just plain mean.

    --
    Who do you get to be an expert to tell you something's not obvious? The least insightful person you can find? -J Roberts