133 matches found
Mandriva Security Advisory MDVSA-2009:303 (php)
The remote host is missing an update to php announced via advisory MDVSA-2009:303. OpenVAS Vulnerability Test $Id: mdksa2009303.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:303 php Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...
Ubuntu: Security Advisory (USN-862-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
PHP tempname()函数绕过safe_mode安全限制漏洞
BUGTRAQ ID: 36555 CVE ID: CVE-2009-3557 PHP是广泛使用的通用目的脚本语言，特别适合于Web开发，可嵌入到HTML中。 PHP的tempnam中的错误可能允许绕过safemode限制。以下是ext/standard/file.c中的有漏洞代码段： PHPFUNCTIONtempnam char dir, prefix; int dirlen, prefixlen; sizet plen; char openedpath; char p; int fd; if zendparseparametersZENDNUMARGS TSRMLSCC, "ss"...
CVE-2009-3557
The CVE-2009-3557 vulnerability affects PHP 5.2.11 and earlier, and 5.3.x before 5.3.1. It concerns the tempnam function in ext/standard/file.c, which can bypass safe_mode restrictions and allow creation of files in group-writable or world-writable directories via the dir and prefix arguments. Th...
Fedora Update for thunderbird FEDORA-2008-3557
Check for the Version of thunderbird OpenVAS Vulnerability Test Fedora Update for thunderbird FEDORA-2008-3557 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...
CVE-2008-3557
CVE-2008-3557 affects Free Hosting Manager (versions 1.2 and 2.0). The vulnerability allows remote attackers to bypass authentication and gain administrative access by setting both the adminuser and loggedin cookies. Documents consistently describe a cookie-based authentication bypass as the root...
CVE-2008-3557
creationtimestamp| type| source ---|---|--- 2008-08-06 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6213...
CVE-2007-3557
SQL injection vulnerability in admin/login.php in Wheatblog wB 1.1, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the login parameter...
CVE-2007-3557
The CVE-2007-3557 issue affects Wheatblog (wB) version 1.1, specifically the admin/login.php script. When magic_quotes_gpc is disabled, the login parameter is vulnerable to SQL injection, enabling remote attackers to execute arbitrary SQL commands. This is documented across multiple sources (NVD,...
CVE-2006-3557
MT Orumcek Toplist 2.2 stores DB/orumcektoplist.mdb under the web root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request...
CVE-2006-3557
CVE-2006-3557 affects MT Orumcek Toplist 2.2, which stores DB/orumcektoplist.mdb under the web root with insufficient access control, enabling remote attackers to obtain sensitive information via a direct request. The cited CVSSv2 base score is 5.0 (Network, Low attack complexity, No authenticati...
CVE-2005-3557
Technical details about CVE-2005-3557 are not publicly provided in the connected documents. No affected versions, root cause, exploit info, or remediation are specified here. Monitor for updates.