185 matches found
PHP < 4.4.5/5.2.1 - '_SESSION' Deserialization Overwrite
?php //////////////////////////////////////////////////////////////////////// // // // | || | | | | | | | || || \ // // | |/ || '|/ |/ -| ' \ / -/ |||| /| || / // // ||||,||| ,|||||||,| || |||||| // // // // Proof of concept code from the Hardened-PHP Project // // C Copyright 2007 Stefan...
PHP < 4.4.5 / 5.2.1 (shmop Functions) Local Code Execution Exploit
Exploit for linux platform in category local exploits ================================================================== PHP 4.4.5 / 5.2.1 shmop Functions Local Code Execution Exploit ================================================================== ?php...
MOPB-10-2007:PHP php_binary Session Deserialization Information Leak Vulnerability
Summary The PHP session extension comes with a serialization handler called 'phpbinary' that is vulnerable to a heap information leak vulnerability. This security hole is the result of a missing boundary check and allows leaking up to 126 bytes following the serialized data into array keys of the...
PHP < 4.4.5 / 5.2.1 php_binary Session Deserialization Information Leak
Exploit for multiple platform in category local exploits ======================================================================= PHP 4.4.5 / 5.2.1 phpbinary Session Deserialization Information Leak ======================================================================= ?php...
