php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login

go to bug id or search bugs for

Sec Bug #72757 Full Path Disclosure in br.php.net mirror
Submitted: 2016-08-05 03:40 UTC Modified: 2017-02-13 01:35 UTC
From: marceloje at gmail dot com Assigned: rasmus (profile)
Status: Closed Package: Website problem
PHP Version: Irrelevant OS: Irrelevant
Private report: No CVE-ID: None
View Developer Edit
Welcome back! If you're the original bug submitter, here's where you can edit the bug or add additional notes.
If you forgot your password, you can retrieve your password here.
Password:
Status:
Package:
Bug Type:
Summary:
From: marceloje at gmail dot com
New email:
PHP Version: OS:

 

 [2016-08-05 03:40 UTC] marceloje at gmail dot com 
Description:
------------
Loading URL http://br.php.net/, Full Path Disclosure happen. 




Test script:
---------------
Open URL http://br.php.net

Expected result:
----------------
No FPD

Actual result:
--------------
The following error is displayed:

Warning: ksort() expects parameter 1 to be array, null given in /home/php.umbler.com/public/include/branches.inc on line 142 Warning: ksort() expects parameter 1 to be array, null given in /home/php.umbler.com/public/include/branches.inc on line 142 Warning: Invalid argument supplied for foreach() in /home/php.umbler.com/public/index.php on line 101 Warning: Invalid argument supplied for foreach() in /home/php.umbler.com/public/index.php on line 101

Patches

Pull Requests

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2016-08-05 03:54 UTC] rasmus@php.net
-Status: Open +Status: Closed -Assigned To: +Assigned To: rasmus
 [2016-08-05 03:54 UTC] rasmus@php.net 
Thanks, fixed. It will take a while to propogate out to that broken mirror though.
 
PHP Copyright © 2001-2025 The PHP Group
All rights reserved. 		Last updated: Mon Apr 28 12:01:34 2025 UTC