2151 matches found
PHP buffer overflow vulnerability (CNVD-2020-13160)
PHP PHP: Hypertext Preprocessor, PHP: Hypertext Preprocessor is an open source general-purpose computer scripting language jointly maintained by the PHPGroup and the open source community. The language is mainly used for Web development and supports a variety of databases and operating systems. A...
PT-2020-19365 · Php +1 · Php +1
Name of the Vulnerable Software and Affected Versions: PHP versions 7.3.x through 7.3.14 PHP versions 7.4.x through 7.4.2 Description: The issue arises when extracting PHAR files on Windows using the phar extension. Certain content inside a PHAR file could lead to a one-byte read past the allocat...
CVE-2020-7061
In PHP versions 7.3.x below 7.3.15 and 7.4.x below 7.4.3, while extracting PHAR files on Windows using phar extension, certain content inside PHAR file could lead to one-byte read past the allocated buffer. This could potentially lead to information disclosure or crash...
CVE-2020-7063
In PHP versions 7.2.x below 7.2.28, 7.3.x below 7.3.15 and 7.4.x below 7.4.3, when creating PHAR archive using PharData::buildFromIterator function, the files are added with default permissions 0666, or all access even if the original files on the filesystem were with more restrictive permissions...
PT-2020-5321 · Php +7 · Php +7
Name of the Vulnerable Software and Affected Versions: PHP versions 7.2.x through 7.2.27 PHP versions 7.3.x through 7.3.14 PHP versions 7.4.x through 7.4.2 Description: The issue is related to the incorrect preservation of permissions when creating PHAR archives using the...
CVE-2020-8801
SuiteCRM through 7.11.11 allows PHAR Deserialization...
CVE-2020-8801
SuiteCRM through 7.11.11 allows PHAR Deserialization...
CVE-2020-8801
SuiteCRM through 7.11.11 allows PHAR Deserialization...
Deserialization of untrusted data
SuiteCRM through 7.11.11 allows PHAR Deserialization...
CVE-2020-8801
SuiteCRM through 7.11.11 allows PHAR Deserialization...
CVE-2020-8801
CVE-2020-8801 affects SuiteCRM up to version 7.11.11. It enables Phar Deserialization via phar:// streams, allowing PHP object injection and potential code execution. Some vectors require elevated rights (e.g., admin). Remediation: upgrade to SuiteCRM 7.11.12 or later.
Multiple Phar Deserialization Vulnerabilities in SuiteCRM
SuiteCRM is a free and open source customer relationship management application. SuiteCRM suffers from multiple Phar deserialization vulnerabilities. An attacker can exploit the vulnerabilities to inject arbitrary PHP objects into the scope of the application, allowing the execution of various...
CVE-2020-8801: Deserialization of Untrusted Data
SuiteCRM through 7.11.11 allows PHAR Deserialization...
Huawei EulerOS: Security Advisory for php (EulerOS-SA-2019-2649)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2018-20783
In PHP before 5.6.39, 7.x before 7.0.33, 7.1.x before 7.1.25, and 7.2.x before 7.2.13, a buffer over-read in PHAR reading functions may allow an attacker to read allocated or unallocated memory past the actual data when trying to parse a .phar file. This is related to pharparsepharfile in...
Gila CMS File Unrestricted Upload Vulnerability
Gila CMS is an open source content management system CMS based on PHP and MySQL. Gila CMS 1.11.8 suffers from a file unrestricted upload vulnerability. An attacker can upload dangerous types of files to lzld/thumb?src= URI via .phar or .phtml, which can enable remote code execution...
LKWA - Lesser Known Web Attack Lab
Lesser Known Web Attack Lab is for intermediate pentester that can test and practice lesser known web attacks such as Object Injection, XSSI, PHAR Deserialization, variables variable ..etc. Write-ups are welcome. Installation Just clone the git with git clone https://github.com/weev3/LKWA and mov...
CVE-2020-5514
Gila CMS 1.11.8 allows Unrestricted Upload of a File with a Dangerous Type via .phar or .phtml to the lzld/thumb?src= URI...