101 matches found
[USN-2276-1] PHP vulnerabilities
========================================================================== Ubuntu Security Notice USN-2276-1 July 09, 2014 php5 vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubunt...
USN-2276-1: PHP vulnerabilities
Francisco Alonso discovered that the PHP Fileinfo component incorrectly handled certain CDF documents. A remote attacker could use this issue to cause PHP to hang or crash, resulting in a denial of service. CVE-2014-0207, CVE-2014-3478, CVE-2014-3479, CVE-2014-3480, CVE-2014-3487 Stefan Esser...
Debian DSA-2974-1 : php5 - security update
Several vulnerabilities were found in PHP, a general-purpose scripting language commonly used for web application development. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2014-0207 Francisco Alonso of the Red Hat Security Response Team reported an...
[SECURITY] [DSA 2974-1] php5 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2974-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso July 08, 2014 http://www.debian.org/security/faq -...
DSA-2974-1 php5 - security update
Bulletin has no description...
CVE-2014-4721
CVE-2014-4721 affects PHP’s phpinfo in ext/standard/info.c. In PHP versions older than 5.4.30 and 5.5.x older than 5.5.14, the implementation does not ensure the PHP_AUTH_PW, PHP_AUTH_TYPE, PHP_AUTH_USER, and PHP_SELF variables use the string data type, enabling a type confusion that could allow ...
KLA10289 OSI vulnerability in PHP
An unspecified vulnerability was found in PHP. By exploiting this vulnerability malicious users can obtain sensitive information. This vulnerability can be exploited remotely at a point related to phpinfo. Original advisories - Related products PHP CVE list CVE-2014-4721 warning Solution Update t...
CVE-2013-4721
CVE-2013-4721 targets TYPO3: SQL injection in the RSS feed for the Records extension (1.0.0 and earlier). Root cause is unsafe handling of input in the RSS feed, enabling remote attackers to execute arbitrary SQL commands via unspecified vectors. Affected component: typo3 extension records RSS fe...
CVE-2010-4721
SQL injection vulnerability in news.php in Immo Makler allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2010-4721
creationtimestamp| type| source ---|---|--- 2010-12-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15754...
CVE-2009-4721
CVE-2009-4721 affects Andrews-Web (A-W) BannerAd 1.0, with multiple SQL injection vulnerabilities in Admin/index.asp that allow remote attackers to execute arbitrary SQL commands via the (1) User and (2) Password parameters. The root cause is unsafely constructed SQL queries in that page, enablin...
CVE-2009-4721
creationtimestamp| type| source ---|---|--- 2009-08-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9328...
CVE-2008-4721
PHP Jabbers Post Comment 3.0 allows remote attackers to bypass authentication and gain administrative access by setting the PostCommentsAdmin cookie to "logged."...
CVE-2008-4721
CVE-2008-4721 affects PHP Jabbers Post Comment 3.0. The vulnerability allows remote attackers to bypass authentication and gain administrative access by setting the PostCommentsAdmin cookie to "logged." The connected documents confirm the attack vector is via a manipulated cookie, leading to unau...
CVE-2008-4721
creationtimestamp| type| source ---|---|--- 2008-09-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6625...
CVE-2006-4721
Directory traversal vulnerability in admin.php in CCleague Pro Sports CMS 1.0.1 RC1 allows remote attackers to read and execute arbitrary local files via a .. dot dot sequence and trailing null %00 byte in the language Cookie parameter, as demonstrated by executing PHP code via a log file...
CVE-2006-4721
CVE-2006-4721 is a directory traversal vulnerability in CCleague Pro Sports CMS 1.0.1 RC1. The issue occurs in admin.php where an attacker can use a .. sequence and a trailing null byte (%00) in the language Cookie parameter to read and execute arbitrary local files, demonstrated by executing PHP...
CVE-2005-4721
CVE-2005-4721 describes a cross-site scripting (XSS) vulnerability in the tmsPUBLISHER 3.3 product, specifically in the search.cfm component. The issue arises when constructing the query via the q parameter, allowing remote attackers to inject arbitrary web script or HTML. The provided sources co...