153 matches found
PHP Web表单哈希冲突拒绝服务漏洞
BUGTRAQ ID: 51193 CVE ID: CVE-2011-4885 PHP 5.3.9之前版本在计算表单参数哈希值的实现上没有提前限制哈希冲突，存在拒绝服务漏洞，通过发送小量的特制webform表单张贴到受影响应用程序，攻击者可利用此漏洞导致使用PHP的站点失去响应正常请求的能力 0 PHP 5.x 厂商补丁： PHP --- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.php.net...
PHP 5.3.x Hashtables Proof Of Concept
...
CVE-2011-4885
CVE-2011-4885 affects PHP before 5.3.9, where the hash used for form parameters can collide predictably, enabling remote CPU-exhaustion DoS via crafted requests. Connected advisories confirm its practical impact and show mitigations/patches across distributions: CentOS/RHEL advisories (e.g., RHSA...
CVE-2010-4885
CVE-2010-4885 affects the TYPO3 extension XING Button (xing) , specifically versions before 1.0.2 . The vulnerability is an XSS flaw that allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Impact is the potential execution of unauthorized scripts in the contex...
CVE-2009-4885
CVE-2009-4885 is a Cross-site Scripting (XSS) vulnerability in phpCommunity 2, version 2.1.8, affecting templates/1/login.php. An attacker can inject arbitrary script/HTML via the msg parameter. CVSS v2 base score: 4.3 (Medium); impact is limited to partial integrity due to user-supplied content,...
CVE-2005-4885
Technical details of CVE-2005-4885 are not provided in the supplied documents; no concrete exploit/vector/affected products are specified here. Monitor for updates.
phpCommunity2 Multiple Remote Input Validation Vulnerabilities
phpCommunity2 is prone to multiple input-validation vulnerabilities, including multiple directory-traversal issues and SQL-injection issues, and a cross-site scripting issue. Exploiting these issues could allow an attacker to view arbitrary local files within the context of the webserver, steal...
CVE-2008-4885
SQL injection vulnerability in tr1.php in YourFreeWorld Scrolling Text Ads Script allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-4885
CVE-2008-4885 is an SQL injection in the file tr1.php of the YourFreeWorld Scrolling Text Ads Script. The vulnerability lets remote attackers send a crafted id parameter to execute arbitrary SQL commands. The NVD CVSS2 base score is 7.5 (HIGH) with network attack vector, low complexity, no authen...
CVE-2008-4885
creationtimestamp| type| source ---|---|--- 2008-11-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6940 2008-11-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6942...
CVE-2007-4885
CVE-2007-4885 affects Avnex AV MP3 Player. A user-assisted remote attacker can cause an application crash (DoS) by supplying a malformed .au file that triggers a divide-by-zero error. Multiple connected sources (NVD, Red Hat, CVE listings) confirm the impact as a denial-of-service condition due t...
