395 matches found
XAMPP for Windows <= 1.6.0a mssql_connect() Remote BoF Exploit
Exploit for unknown platform in category remote exploits ============================================================== XAMPP for Windows Connect$POST'host', $POST'user', $POST'password', $POST'database'; echo "DBServer: $POSTdbserver"; $result = $db-Execute"SELECT FROM $POSTtable";...
Crlf injection
CRLF injection vulnerability in the FILTERVALIDATEEMAIL filter in ext/filter in PHP 5.2.0 and 5.2.1 allows context-dependent attackers to inject arbitrary e-mail headers via an e-mail address with a '\n' character, which causes a regular expression to ignore the subsequent part of the address...
CVE-2007-1900
CVE-2007-1900 describes a CRLF injection vulnerability in the PHP 5.2.0–5.2.1 FILTER_VALIDATE_EMAIL filter, enabling context-dependent attackers to inject arbitrary email headers by including a newline in the address. The cited advisories indicate this affects PHP up to 5.2.1; a PHP 5.2.3 release...
Integer overflow
Integer overflow in the strreplace function in PHP 4.4.5 and PHP 5.2.1 allows context-dependent attackers to have an unknown impact via a single character search string in conjunction with a single character replacement string, which causes an "off by one overflow."...
Buffer overflow
Buffer overflow in the sqlitedecodebinary function in the bundled sqlite library in PHP 4 before 4.4.5 and PHP 5 before 5.2.1 allows context-dependent attackers to execute arbitrary code via an empty value of the in parameter, as demonstrated by calling the sqliteudfdecodebinary function with a...
readfile() Safe Mode Bypass PHP 5.2.1/ 5.1.6 / 4.4.4
SecurityRisk : DEN Remote Exploit : No Local Exploit : Yes Exploit Given : Yes Credit : The-WolF-kSA Date : 24.3.2007 Affected Software : PHP 5.2.1/ 5.1.6 / 4.4.4 readfile Safe Mode Bypass PHP 5.2.1/ 5.1.6 / 4.4.4 Author: ThE-WoLf-KsA Date: - -Written: 24.3.2007 - --- 0.Description --- - --- 1...
PHPDoc Confirm_Phpdoc_Compiled本地缓冲区溢出漏洞
phpDOC是一款用于建立PEAR文档的应用程序。 phpDOC存在缓冲区溢出问题，本地攻击者可以利用漏洞以应用程序进程权限执行任意指令。 由于对参数缺少正确的边界检查，提交超长字符串作为confirmphpdoccompiled参数可触发溢出，并以应用程序进程权限执行任意指令。 phpDocumentor phpDocumentor 1.3.1 phpDocumentor phpDocumentor 1.3 RC4 phpDocumentor phpDocumentor 1.3 RC3 phpDocumentor phpDocumentor 1.2.3 phpDocumentor...
PHP 5.2.1 - Multiple functions 'Reference' Information Disclosures
source: https://www.securityfocus.com/bid/23202/info PHP is prone to an information-disclosure vulnerability due to a design error. The vulnerability resides in various functions that accept parameters as references. Successful exploits will allow attackers to obtain sensitive information...
Buffer overflow
Buffer overflow in the confirmphpdoccompiled function in the phpDOC extension PECL phpDOC in PHP 5.2.1 allows context-dependent attackers to execute arbitrary code via a long argument string...
CVE-2007-1709
CVE-2007-1709 describes a buffer overflow in the confirm_phpdoc_compiled function of the phpDOC PECL extension for PHP 5.2.1. The vulnerability allows a context-dependent, local attacker to execute arbitrary code via a long argument string. The affected component is the phpDOC extension in PHP 5....
CVE-2007-1709
Buffer overflow in the confirmphpdoccompiled function in the phpDOC extension PECL phpDOC in PHP 5.2.1 allows context-dependent attackers to execute arbitrary code via a long argument string...
PHP 5.2.1 with PECL phpDOC local buffer overflow
?php //PHP 5.2.1 with PECL phpDOC confirmphpdoccompiled local buffer overflow poc exploit //WIN 2K SP3 version / seh overwrite method //to be launched from the cli // by rgod // site: http://retrogod.altervista.org if !extensionloaded"phpDOC" die"you need the phpDOC extension loaded."; $scode=...
php521_phpdoc_bof.txt
original url: http://retrogod.altervista.org/php521phpdocbof.html...
php-readfile.txt
SecurityRisk : DEN Remote Exploit : No Local Exploit : Yes Exploit Given : Yes Credit : The-WolF-kSA Date : 24.3.2007 Affected Software : PHP 5.2.1/ 5.1.6 / 4.4.4 readfile Safe Mode Bypass PHP 5.2.1/ 5.1.6 / 4.4.4 Author: ThE-WoLf-KsA Date: - -Written: 24.3.2007 - --- 0.Description --- - --- 1...
MOPB-29-2007:PHP 5.2.1 unserialize() Information Leak Vulnerability
Summary The new S: data type added to PHP 5.2.1's serialisation format is completely broken. The new feature it is supposed to add, the handling of escaped strings does not work at all and leads to disclosure of heap memory content. Affected versions Affected is PHP 5.2.1 Detailed information Wit...
PHP 5.2.1 with PECL PHPDOC - Local Buffer Overflow
PHP 5.2.1 with PECL PHPDOC - Local Buffer Overflow milw0rm.com 2007-03-25...
PHP 5.2.1 with PECL phpDOC Local Buffer Overflow Exploit
Exploit for unknown platform in category local exploits ======================================================== PHP 5.2.1 with PECL phpDOC Local Buffer Overflow Exploit ======================================================== 0day.today 2018-03-14...
PHP 5.2.1 with PECL PHPDOC - Local Buffer Overflow
milw0rm.com 2007-03-25...
PHP < 4.4.5/5.2.1 - '_SESSION' Deserialization Overwrite
?php //////////////////////////////////////////////////////////////////////// // // // | || | | | | | | | || || \ // // | |/ || '|/ |/ -| ' \ / -/ |||| /| || / // // ||||,||| ,|||||||,| || |||||| // // // // Proof of concept code from the Hardened-PHP Project // // C Copyright 2007 Stefan...