Design/Logic Flaw

The extract function in PHP before 5.2.15 does not prevent use of the EXTROVERWRITE parameter to overwrite 1 the GLOBALS superglobal array and 2 the this variable, which allows context-dependent attackers to bypass intended access restrictions by modifying data structures that were not intended t...

FreeBSD Ports: php5

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2011 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2006-7243

PHP before 5.3.4 accepts a NUL (\0) in a pathname, enabling context-dependent bypass of access restrictions (example: .php\0.jpg) via file_exists; remediation involves upgrading to a fixed PHP version (5.3.4+; later advisories note 5.4.41+/5.5.x+/5.6.x fixes). The CVE-2015-4025/4026 entries ackno...

[SECURITY] [DSA 2146-1] Security update for mydms

------------------------------------------------------------------------- Debian Security Advisory DSA-2146-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 16, 2011 http://www.debian.org/security/faq -...

Fedora Update for php FEDORA-2010-19011

Check for the Version of php OpenVAS Vulnerability Test Fedora Update for php FEDORA-2010-19011 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

Fedora Update for php-eaccelerator FEDORA-2010-18976

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for php-eaccelerator FEDORA-2010-18976

Check for the Version of php-eaccelerator OpenVAS Vulnerability Test Fedora Update for php-eaccelerator FEDORA-2010-18976 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

Fedora Update for maniadrive FEDORA-2010-19011

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Nmap NSE: RealVNC Authentication Bypass

This script attempts to check if a VNC server is vulnerable to the RealVNC authentication bypass CVE-2006-2369. This is a wrapper on the Nmap Security Scanner's http://nmap.org realvnc-auth-bypass.nse. OpenVAS Vulnerability Test $Id: gbnmaprealvncauthbypass.nasl 7006 2017-08-25 11:51:20Z teissa $...

CVE-2006-5815

creationtimestamp| type| source ---|---|--- 2011-01-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16852 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/ftp/proftpsreplace.rb 2025-02-06 03:13:38+00:00| seen|...

Mandriva Update for php MDVSA-2010:254 (php)

Check for the Version of php OpenVAS Vulnerability Test Mandriva Update for php MDVSA-2010:254 php Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

Mandriva Update for php MDVSA-2010:254 (php)

Check for the Version of php OpenVAS Vulnerability Test Mandriva Update for php MDVSA-2010:254 php Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

Mandriva Linux Security Advisory : php (MDVSA-2010:254)

This is a maintenance and security update that upgrades php to 5.3.4 for 2010.0/2010.1. Security Enhancements and Fixes in PHP 5.3.4 : - Paths with NULL in them foo\0bar.txt are now considered as invalid CVE-2006-7243. - Fixed bug 53512 NumberFormatter::setSymbol crash on bogus values CVE-2010-44...

FreeBSD : php -- multiple vulnerabilities (5353)

The following package needs to be updated: php52 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the VuXML entry has been cancelled. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright 2003-2006 Jacques...

php -- NULL byte poisoning

PHP-specific version of NULL-byte poisoning was briefly described by ShAnKaR: Poison NULL byte vulnerability for perl CGI applications was described in 1. ShAnKaR noted, that same vulnerability also affects different PHP applications. PHP developers report that branch 5.3 received a fix: Paths wi...

CVE-2006-6807

creationtimestamp| type| source ---|---|--- 2010-12-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15661...

America Online ICQ - ActiveX Control Arbitrary File Download and Execute (Metasploit)

$Id: aolicqdownloadagent.rb 11127 2010-11-24 19:35:38Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

CVE-2006-5650

creationtimestamp| type| source ---|---|--- 2010-11-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16554 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/aolicqdownloadagent.rb 2025-02-06 03:13:38+00:00...

CVE-2006-5780

creationtimestamp| type| source ---|---|--- 2010-11-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16389 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/nfs/xlinknfsd.rb 2025-02-06 03:13:38+00:00| seen|...

CVE-2006-6251

creationtimestamp| type| source ---|---|--- 2010-11-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16617 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/vuplayerm3u.rb 2025-02-06 03:13:38+00:00| see...