I see a lot of requests for nonexistent php files on my website. They tend to have a querystring like
appserv_root=http://www.example.com, using domains with evil-looking php code.
I am pretty confident that this is trying to make use of some php vulnerability or other. So, I am curious:
- What vulnerability is this trying to make use of?
- How does one protect against this vulnerability?
- What in the site configuration would be changed if this vulnerability was successfully exploited?