My shared hosting provider uses PHP 5.2.5, which was released at the end of 2007. I would like to know the security holes of PHP 5.2.5. Where I can get them?
-
12The first one is letting everyone know that the phpinfo file is public on your server– Michael B.Dec 16, 2010 at 16:14
-
1Have to agree with @Michael B. - remove that file ASAP.– John ParkerDec 16, 2010 at 16:15
-
2Ask your provider to install a more recent version of PHP. The PHP5.2 branch has officially reached End Of Support as of Dec, 16 2010. Everyone is encouraged to upgrade to the PHP 5.3 branch.– GordonDec 16, 2010 at 16:17
-
1You might be in luck over at security.stackexchange.com aswell– Chris DaleDec 16, 2010 at 16:50
-
@Michael B., feel free to hack– ilhanDec 16, 2010 at 23:40
Add a comment
|
4 Answers
Curiously enough, specific security issues aren't often published (otherwise they'd be very easy to exploit), but you can generally get an idea from the changelogs for subsequent releases.
Vulnerabilities are on this page:
If you are after really long and extensive list go here: security focus, if you are just after publicly available exploits, you may wanna search exploitdb. There is nothing major from what I've seen so far.