News for hackers. Stuff that matters.

A comment on Zero-day in jQuery plugin sample code exploited for at least three years. Parent comment

Re:Zero-day in jQuery plugin sample code exploited for at le... by quickthrower2 on Sunday October 21, 2018 @06:47PM (#18270808)
"Zero-day in popular jQuery plugin" is a bit misleading for the title then. More like "Zero-day in copy pasted code in PHP if apache incorrectly configured".
[ Parent | on HN ]
Re:Zero-day in jQuery plugin sample code exploited for at le... by femto113 on Monday October 22, 2018 @12:15AM (#18272130)
I think the title is substantially misleading in that it suggests the bug is in the plugin itself. Maybe "Zero-day in PHP server sample code provided with popular jQuery plugin"?
[ Parent | on HN ]
Re:Zero-day in jQuery plugin sample code exploited for at le... by TylerE on Sunday October 21, 2018 @06:56PM (#18270845)
That’s not really true, given that the default Apache confit is vulnerable.
[ Parent | on HN ]