Simon Willison’s Weblog

PHP 4 phpinfo() XSS Vulnerability. Another reason not to run an open phpinfo() page on your server.

Posted 4th March 2007 at 9:24 pm