This page cannot be shown here. You can still read it on the original site — the toolbar below keeps your place in the directory.
I first decided to look at phpPgAdmin after reading this blog post that someone wrote up about abusing it to get a bug bounty. After reading through the source I discovered a bug in the library it was using to interact with Postgres. When a user logs in the username and password is filtered by this function: function adodb_addslashes ($s) { $len = strlen ($s); if ($len == 0 ) return '''' ; if (…
Comments
Nothing yet. Say the first thing.
Sign in to join the conversation.