[Phpwiki-talk] possibility of compromise of bug tracker, etc for SF projects running phpwiki

[Robert D. <rob...@ya...>]

Hello,

I'm running PhpWiki for one SF project (riso.sf.net) and I'm
trying to convince another project to adopt it. PhpWiki is great!

I've been asked whether comprise of PhpWiki could lead to
compromise of the bug tracker, download manager, project
web page, etc -- i.e., the SF resources of the project other
than PhpWiki.

I want to reassure my coworkers that there is no known avenue
or exploit by which comprising PhpWiki could lead to compromising
other resources. Does anyone know of any such mechanism?

I'd really like to restrict discussion of this question to
the vulnerability of non-PhpWiki resources; in this context,
the security of PhpWiki itself is not (at the moment) an issue.

Thanks very much for your help. I appreciate it a lot!

Robert Dodier

__________________________________
Do you Yahoo!?
Yahoo! Hotjobs: Enter the "Signing Bonus" Sweepstakes
http://hotjobs.sweepstakes.yahoo.com/signingbonus