114 matches found
CVE-2008-3378
CVE-2008-3378 describes an SQL injection in the PHP file comment.php of Fizzmedia 1.51.2 , exploitable by remote attackers via the mid parameter to execute arbitrary SQL commands. The connected documents confirm the vulnerable component and the injection vector but do not provide details on explo...
CVE-2008-3378
creationtimestamp| type| source ---|---|--- 2008-07-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6133...
FreeBSD : php -- multiple vulnerabilities (71d903fc-602d-11dc-898c-001921ab2fa4)
The PHP development team reports : Security Enhancements and Fixes in PHP 5.2.4 : - Fixed a floating point exception inside wordwrap Reported by Mattias Bengtsson - Fixed several integer overflows inside the GD extension Reported by Mattias Bengtsson - Fixed size calculation in chunksplit Reporte...
php -- multiple vulnerabilities
The PHP development team reports: Security Enhancements and Fixes in PHP 5.2.4: Fixed a floating point exception inside wordwrap Reported by Mattias Bengtsson Fixed several integer overflows inside the GD extension Reported by Mattias Bengtsson Fixed size calculation in chunksplit Reported by...
CVE-2007-3378
CVE-2007-3378 affects PHP 4.4.7 and earlier and PHP 5.2.3 and earlier, when processed via .htaccess. The vulnerability allows remote attackers to bypass safe_mode and open_basedir restrictions and potentially execute arbitrary commands via directives like php_value/php_flag in .htaccess. Connecte...
PHP .Htaccess Safe_Mode和Open_Basedir限制绕过漏洞
BUGTRAQ ID: 24661 CVE ID:CVE-2007-3378 CNCVE ID:CNCVE-20073378 PHP是一款广泛使用的WEB开发脚本语言。 PHP存在'safemode'和'openbasedir'限制绕过问题，远程攻击者可以利用漏洞写文件到未授权系统位置。 当使用PHP作为Apache模块，可以通过在.htaccess文件中使用指示进行培植二十时亿兆时毫...
CVE-2006-3378
passwd command in shadow in Ubuntu 5.04 through 6.06 LTS, when called with the -f, -g, or -s flag, does not check the return code of a setuid call, which might allow local users to gain root privileges if setuid fails in cases such as PAM failures or resource limits...
CVE-2006-3378
passwd command in shadow in Ubuntu 5.04 through 6.06 LTS, when called with the -f, -g, or -s flag, does not check the return code of a setuid call, which might allow local users to gain root privileges if setuid fails in cases such as PAM failures or resource limits...
CVE-2006-3378
CVE-2006-3378 affects the shadow passwd handling in Ubuntu 5.04–6.06 LTS, where passwd invoked with -f, -g, or -s does not check the return code of a setuid() call. This can allow local users to gain root privileges if setuid fails (e.g., due to PAM limits or resource caps). Exploitation details ...
CVE-2006-3378
passwd command in shadow in Ubuntu 5.04 through 6.06 LTS, when called with the -f, -g, or -s flag, does not check the return code of a setuid call, which might allow local users to gain root privileges if setuid fails in cases such as PAM failures or resource limits...
WinComet Detection
Binary data 3378.prm...
CVE-2005-3378
Multiple interpretation error in Norman 5.81 with the 5.83.02 engine allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML with an "MZ" magic byte sequence which is normally associated with EXE, which causes the file to be treated as a safe type that could still b...
CVE-2005-3378
CVE-2005-3378 affects Norman 5.81 with the 5.83.02 engine. A interpretation error in handling files containing an MZ (EXE) magic byte sequence causes such files (e.g., BAT, HTML, EML) to be treated as safe types, enabling a “magic byte bug” where content can still execute as dangerous code. The v...