acabo de leer esto http://www.milw0rm.com/exploits/2348 y no sé si estáis al tanto, si debo hacer caso (la página de donde lo he sacado me sugiere que si lo haga) o si debo dejarlo de lado.
Según las propias palabras del autor del exploit:
# Poison NULL byte vulnerability for perl CGI applications was described
# in [1]. ShAnKaR noted, that same vulnerability also affects different
# PHP applications. An example of vulnerable applications are phpBB and
# punBB.
#
# Vulnerability can be used to upload or replace arbitrary files on
# server, e.g. PHP scripts, by adding "poison NULL" (%00) to filename.
#
# In case of phpBB and punBB vulnerability can be exploited by changing
# location of avatar file and uploading avatar file with PHP code in EXIF
# data.
#
# A PoC exploit to change Avatar file location for phpBB:
[/quoteicy]
Espero vuestras respuestas, gracias
