File tree Expand file tree Collapse file tree 1 file changed +11
-2
lines changed Expand file tree Collapse file tree 1 file changed +11
-2
lines changed Original file line number Diff line number Diff line change @@ -4,11 +4,20 @@ SOAP Bug #71610 - Type Confusion Vulnerability - SOAP / make_http_soap_request()
4
4
soap
5
5
--SKIPIF--
6
6
<?php
7
- if (getenv ("SKIP_ONLINE_TESTS " )) die ("skip online test " );
7
+ if (!file_exists (__DIR__ . "/../../../sapi/cli/tests/php_cli_server.inc " )) {
8
+ echo "skip sapi/cli/tests/php_cli_server.inc required but not found " ;
9
+ }
8
10
?>
9
11
--FILE--
10
12
<?php
11
- $ exploit = unserialize ('O:10:"SoapClient":3:{s:3:"uri";s:1:"a";s:8:"location";s:19:"http://example.org/";s:8:"_cookies";a:1:{s:8:"manhluat";a:3:{i:0;s:0:"";i:1;N;i:2;N;}}} ' );
13
+ include __DIR__ . "/../../../sapi/cli/tests/php_cli_server.inc " ;
14
+ php_cli_server_start ();
15
+
16
+ $ url = "http:// " . PHP_CLI_SERVER_ADDRESS ;
17
+ $ ser = 'O:10:"SoapClient":3:{s:3:"uri";s:1:"a";s:8:"location";s: ' . strlen ($ url ) . ':" '
18
+ . $ url . '";s:8:"_cookies";a:1:{s:8:"manhluat";a:3:{i:0;s:0:"";i:1;N;i:2;N;}}} ' ;
19
+
20
+ $ exploit = unserialize ($ ser );
12
21
try {
13
22
$ exploit ->blahblah ();
14
23
} catch (SoapFault $ e ) {
You can’t perform that action at this time.
0 commit comments