openSUSE Security Update : apache2-mod_php5 (openSUSE-SU-2010:0599-1)

PHP was updated to version 5.3.3 to fix serveral security issues. CVE-2010-0397, CVE-2010-1860, CVE-2010-1862, CVE-2010-1864, CVE-2010-1866, CVE-2010-1914, CVE-2010-1915, CVE-2010-1917, CVE-2010-2093, CVE-2010-2094, CVE-2010-2097, CVE-2010-2100, CVE-2010-2101, CVE-2010-2190, CVE-2010-2191,...

CVE-2010-2094

CVE-2010-2094 affects the PHP phar extension (PHP 5.3.x before 5.3.2) via crafted phar:// URIs, enabling context-dependent attackers to view memory contents and potentially execute arbitrary code. The vulnerability is triggered by improper handling in phar_stream_flush, phar_wrapper_unlink, phar_...

CVE-2010-2094

creationtimestamp| type| source ---|---|--- 2010-05-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33988...

CVE-2009-2094

Technical details about CVE-2009-2094 are not publicly available in the provided documents. Monitor for updates.

CVE-2008-2094

CVE-2008-2094 : The provided documents describe a SQL injection vulnerability in the XOOPS Article Module, specifically in article.php via the id parameter. The vulnerability allows a remote attacker to execute arbitrary SQL commands through user-supplied input, thereby potentially exposing or al...

CVE-2008-2094

creationtimestamp| type| source ---|---|--- 2008-04-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31681 2010-08-28 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/14828...

CVE-2007-2094

CVE-2007-2094 describes a PHP remote file inclusion in Anthologia 0.5.2. The vulnerability is triggered in index.php via the ads_file parameter, allowing a remote attacker to execute arbitrary PHP code by supplying a URL. Affected software/version: Anthologia 0.5.2 (index.php, ads_file). Root cau...

CVE-2002-2094

CVE-2002-2094 affects the Hellbent vulnerability described in PT-2002-2814 for hellbent version 01. An attacker can determine the full path of the web root directory by sending a GET request with a relative path that includes the web root’s parent. If the parent is incorrect, the server returns a...

CVE-2004-2094

WebcamXP 1.06.945 is affected by a cross-site scripting (XSS) vulnerability. A remote attacker can inject arbitrary HTML or web script as other users through a URL that contains the script. The description does not provide concrete details on root cause beyond the XSS flaw, nor explicit remediati...

CVE-2002-2094

Joe Testa hellbent 01 allows remote attackers to determine the full path of the web root directory via a GET request with a relative path that includes the root's parent, which generates a 403 error message if the parent is incorrect, but a normal response if the parent is correct...