[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: Re: Moodle 1.9.3 Remote Code Execution
- To: bugtraq@xxxxxxxxxxxxxxxxx
- Subject: Re: Re: Moodle 1.9.3 Remote Code Execution
- From: martin@xxxxxxxxxx
- Date: 16 Dec 2008 04:47:01 -0000
Similar hacks have been discussed here:
http://moodle.org/mod/forum/discuss.php?d=111710#p490453
Affected sites seem to be all running PHP with register_global turned on, which
is a really bad idea and not recommended by Moodle.