http://www.stiumuzica.ro/

[sourcecode]

PHP Hash Collision Denial Of Service Vulnerability

Hash tables are a commonly used data structure in most programming languages. Web application servers or platforms commonly parse attacker-controlled POST form data into hash tables automatically, so that they can be accessed by application developers. If the language does not provide a randomized hash function or the application server does not recognize attacks using multi-collisions, an attacker can degenerate the hash table by sending lots of colliding keys. The algorithmic complexity of inserting n elements into the table then goes to O(n**2), making it possible to exhaust hours of CPU time using a single HTTP request.

Affected PHP versions (up to 5.3.8).

[ionutz15]

Asa si ce ai rezolvat?

Dai cu Netsparker in toate site-urile?

[GoguMic]

Asa si ce ai rezolvat?

Dai cu Netsparker in toate site-urile?

NU, da cu acunetix, ca atata stie.