157 matches found
USN-1905-1: PHP vulnerabilities
It was discovered that PHP incorrectly handled the xmlparseintostruct function. If a PHP application parsed untrusted XML, an attacker could use this flaw with a specially-crafted XML document to cause PHP to crash, resulting in a denial of service, or to possibly execute arbitrary code...
Critical: Red Hat Security Advisory: php security update
Updated php packages that fix one security issue are now available for Red Hat Enterprise Linux 5.3 Long Life, and Red Hat Enterprise Linux 5.6, 6.2 and 6.3 Extended Update Support. The Red Hat Security Response Team has rated this update as having critical security impact. A Common Vulnerability...
Critical: Red Hat Security Advisory: php security update
Updated php packages that fix one security issue are now available for Red Hat Enterprise Linux 3 and 4 Extended Life Cycle Support. The Red Hat Security Response Team has rated this update as having critical security impact. A Common Vulnerability Scoring System CVSS base score, which gives a...
[ MDVSA-2013:195 ] php
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2013:195 http://www.mandriva.com/en/support/security/ Package : php Date : July 12, 2013 Affected: Business Server 1.0, Enterprise Server 5.0 Problem Description: A vulnerability has been discovered and corrected...
RHEL 5 / 6 : php (RHSA-2013:1049)
Updated php packages that fix one security issue are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having critical security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
RHEL 5 : php53 (RHSA-2013:1050)
Updated php53 packages that fix one security issue are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having critical security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
CentOS 5 : php53 (CESA-2013:1050)
Updated php53 packages that fix one security issue are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having critical security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
Oracle Linux 5 : php53 (ELSA-2013-1050)
The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-1050 advisory. 5.3.3-13.1 - add security fix for CVE-2013-4113 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note tha...
CVE-2013-4113
ext/xml/xml.c in PHP before 5.3.27 does not properly consider parsing depth, which allows remote attackers to cause a denial of service heap memory corruption or possibly have unspecified other impact via a crafted document that is processed by the xmlparseintostruct function...
CVE-2013-4113
PHP before 5.3.27 in ext/xml/xml.c is vulnerable to DoS/heap memory corruption via crafted XML parsed by xml_parse_into_struct. The CVE entry (CVE-2013-4113) is supported by security advisories (F5 and others) noting affected PHP releases and the vulnerability description. Impact is denial of ser...
php security update
CentOS Errata and Security Advisory CESA-2013:1049 Updated php packages that fix one security issue are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having critical security impact. A Common Vulnerability Scoring System CVSS base...
Critical: Red Hat Security Advisory: php security update
Updated php packages that fix one security issue are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having critical security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
Critical: Red Hat Security Advisory: php53 security update
Updated php53 packages that fix one security issue are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having critical security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
Critical: php
Issue Overview: A buffer overflow flaw was found in the way PHP parsed deeply nested XML documents. If a PHP application used the xmlparseintostruct function to parse untrusted XML content, an attacker able to supply specially-crafted XML could use this flaw to crash the application or, possibly,...
Critical: php54
Issue Overview: A buffer overflow flaw was found in the way PHP parsed deeply nested XML documents. If a PHP application used the xmlparseintostruct function to parse untrusted XML content, an attacker able to supply specially-crafted XML could use this flaw to crash the application or, possibly,...
php53 security update
5.3.3-13.1 - add security fix for CVE-2013-4113...
php security update
5.3.3-23 - add security fix for CVE-2013-4113...
PHP 5.3.x < 5.3.27 Multiple Vulnerabilities
According to its banner, the version of PHP 5.3.x installed on the remote host is prior to 5.3.27. It is, therefore, potentially affected by the following vulnerabilities: - A buffer overflow error exists in the function 'pdopgsqlerror'. Bug 64949 - A heap corruption error exists in numerous...
CVE-2011-4113
SQL injection vulnerability in the Views module before 6.x-2.13 for Drupal allows remote attackers to execute arbitrary SQL commands via vectors related to "filters/arguments on certain types of views with specific configurations of arguments."...
CVE-2011-4113
CVE-2011-4113 describes a SQL injection vulnerability in the Drupal Views module , present in versions before 6.x-2.13 . The issue allows remote attackers to execute arbitrary SQL commands via vectors related to the filters/arguments on certain types of views with specific configurations of argum...