Re: possibility of compromise of bug tracker, etc for SF projects running phpwiki

On Mon, 2004-01-12 at 14:30, Robert Dodier wrote:
> Hello,

I guess the question is could phpwiki offer access to other resources.

I see a few possibilities:

1)  Access to files not available to the web interface, but available to
the web user.

2)  Access to databases via open connections and bad sql checking.

The first seems to be in the range of "any php script."

The second is nixed if the DB user the wiki uses is not the same as any
other DB user.


-- 
Zot O'Connor

http://www.ZotConsulting.com
http://www.WhiteKnightHackers.com



-------------------------------------------------------
This SF.net email is sponsored by: Perforce Software.
Perforce is the Fast Software Configuration Management System offering
advanced branching capabilities and atomic changes on 50+ platforms.
Free Eval! http://www.perforce.com/perforce/loadprog.html