QuickPHP is prone to a remote source-code-disclosure vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to view the source code of files in the context of the server process this may aid in further attacks. QuickPHP 1.10.0 is vulnerable other versions may also be affected.

• http://www.zachsaw.co.cc/?pg=quickphp_php_tester_debugger
• https://www.securityfocus.com/bid/45626

---

Updated on 2015-03-25