Simple Machines Forum unset() vulnerabilities

[ghici]

http://www.hardened-php.net/hphp/zend_hash...nerability.html

local inclusion flaw that works only against

*windows boxes* (because the non-existent folder inside include path that does not work on Linux) and potentially to execute arbitrary code:

http://retrogod.altervista.org/smf_11rc2_l...local_incl.html

and a D.o.S., simple users can lock topics:

http://retrogod.altervista.org/smf_11rc2_lock.html

dork, version specific:

http://www.google.com/search?hl=en&q=%22po...um=100&filter=0

regards, rgod

[edededi]

si ce ar trebuii sa faca?