Newest php version is not compatible with Mutillidae

webpwnized / mutillidae-docker

OWASP Mutillidae II is a free, open-source, deliberately vulnerable web application providing a target for web-security enthusiasts.

GNU General Public License v3.0

82 stars 38 forks source link

Newest php version is not compatible with Mutillidae #14

Closed mhogstrom closed 1 year ago

mhogstrom commented 1 year ago

https://php.watch/versions/8.2/dynamic-properties-deprecated

I get php errors when accessing for example WebServices DnsLookup. The docker files are based on mysql:debian latest, which includes the latest php, which deprecates dynamic properties.

Deprecated: Creation of dynamic property wsdl::$serviceName is deprecated in /var/www/mutillidae/webservices/soap/lib/nusoap.php on line 4718

webpwnized commented 1 year ago

Update so far:

Replicate: Browse to http://mutillidae.localhost/webservices/soap/ws-lookup-dns-record.php

Message: Deprecated: Creation of dynamic property wsdl::$serviceName is deprecated in /var/www/mutillidae/webservices/soap/lib/nusoap.php on line 4718

webpwnized commented 1 year ago

Patched in version 1.0.41 which itself is patched by version 2.11.5 of Mutillidae. This patch also patches mutillidae-dockerhub in version 1.0.14 of that project.