[Full-disclosure] Critical PHP bug - act ASAP if you are running web with sensitive data

[Moriyoshi Koizumi]

Peter Conrad wrote:

>Hi,
>
>On Mon, Apr 03, 2006 at 11:06:01PM +0900, Moriyoshi Koizumi wrote:
>  
>
>>While this is not part of the HTML / HTTP standards, major 
>>browsers
>>around try to send such characters in the user input as HTML entities 
>>that cannot
>>all be represented in the encoding of the originating HTML page
>>    
>>
>
>out of curiosity: can you give an example for that behaviour? I've
>never seen it.
>  
>
http://www.voltex.jp/~moriyoshi/test/demo.php

Moriyoshi