Date: 06/26/06 (Java Web)    Keywords: php, security, hosting

Maksymilian Arciemowicz has discovered a weakness in PHP, which can be exploited by malicious, local users to bypass certain security restrictions. This could have a major impact in shared hosting systems. The weakness is caused due to an input validation error in the PHP error_log() function in the processing of the destination parameter. It can be [...]

Source: http://blog.taragana.com/index.php/archive/php-safe-mode-bypass-weakness-uncovered-in-error_log/