Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
PHP 4.3.4 and earlier in Apache 1.x and 2.x (mod_php) can leak global variables between virtual hosts that are handled by the same Apache child process but have different settings, which could allow remote attackers to obtain sensitive information.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Apache mod_php全局变量信息泄露漏洞
Vulnerability Description
Apache mod_php是用于解析PHP的Apache模块。 Apache mod_php在部分设置的情况下存在问题，远程攻击者可以利用这个漏洞获得敏感信息。 如果服务器配置文件"php.ini"设置"register_globals = on"，及提交一个请求给虚拟主机(虚拟主机包含"php_admin_flag register_globals off"设置)，如果下一个请求通过相同apache子进程发送给其他的虚拟主机(此虚拟主机没有任何设置)，那么服务器部分设置就会泄露。 根据服务器和站点配置
CVSS Information
N/A
Vulnerability Type
N/A