bug71610.phpt 513 B

12345678910111213141516171819
  1. --TEST--
  2. SOAP Bug #71610 - Type Confusion Vulnerability - SOAP / make_http_soap_request()
  3. --EXTENSIONS--
  4. soap
  5. --SKIPIF--
  6. <?php
  7. if (getenv("SKIP_ONLINE_TESTS")) die("skip online test");
  8. ?>
  9. --FILE--
  10. <?php
  11. $exploit = unserialize('O:10:"SoapClient":3:{s:3:"uri";s:1:"a";s:8:"location";s:19:"http://example.org/";s:8:"_cookies";a:1:{s:8:"manhluat";a:3:{i:0;s:0:"";i:1;N;i:2;N;}}}}');
  12. try {
  13. $exploit->blahblah();
  14. } catch(SoapFault $e) {
  15. echo $e->getMessage()."\n";
  16. }
  17. ?>
  18. --EXPECT--
  19. looks like we got no XML document