283 matches found
Liferay XSL - Command Execution
$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' require 'activesupport/json'...
PHP <= 5.2.3 EXT/Session HTTP Response Header Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/24268/info PHP is prone to an HTTP-response-header-injection vulnerability because it fails to sanitize user-supplied input. An attacker can exploit this issue to inject additional cookie attributes into session cookies...
PHP <= 5.2.3 (php_win32sti) Local Buffer Overflow Exploit (2)
No description provided by source. ?php ---------------------------------------------------- --------PHP win32std Buffer Overflow Exploit-------- ---------------------------------------------------- -Tested on:-PHP 5.2.3------------------------------- ------------Windows XP SP2...
gv32 5.2.3 /application/www/art.php SQL注入漏洞
No description provided by source...
Liferay XSL Command Execution
Exploit for windows platform in category remote exploits $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
Fedora Update for php-doctrine-Doctrine FEDORA-2011-4098
Check for the Version of php-doctrine-Doctrine OpenVAS Vulnerability Test Fedora Update for php-doctrine-Doctrine FEDORA-2011-4098 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...
[SECURITY] Fedora 14 Update: php-doctrine-Doctrine-1.2.4-1.fc14
Doctrine is an object relational mapper ORM for PHP 5.2.3+ that sits on t op of a powerful database abstraction layer DBAL. One of its key features is the option to write database queries in a proprietary object oriented SQL diale ct called Doctrine Query Language DQL, inspired by Hibernates HQL...
Liferay Portal < 5.2.3 'exportFileName' File Creation Remote Code Execution
Binary data 5859.prm...
[SECURITY] Fedora 15 Update: php-doctrine-Doctrine-1.2.4-1.fc15
Doctrine is an object relational mapper ORM for PHP 5.2.3+ that sits on t op of a powerful database abstraction layer DBAL. One of its key features is the option to write database queries in a proprietary object oriented SQL diale ct called Doctrine Query Language DQL, inspired by Hibernates HQL...
Multiple PHP Functions - Local Denial of Service Vulnerabilities
Exploit for multiple platform in category dos / poc ================================================================ Multiple PHP Functions - Local Denial of Service Vulnerabilities ================================================================ cominvoke // http://www.nullbyte.org.il // //...
PHP 5.2.3 之前版本存在多个漏洞
No description provided by source...
PHP 5.2.3 Glob 函数拒绝服务漏洞
No description provided by source...
DSA-1600-1 sympa - denial of service
Bulletin has no description...
PHP 5.2.4及之前版本存在多个漏洞
PHP是一款流行的网络编程语言。 PHP存在多个安全问题，远程攻击者可以利用漏洞进行缓冲区溢出，拒绝服务，和安全绕过攻击。 -dl处理文件名存在问题，可导致跨站脚本攻击。 -dl处理MAXPATHLEN参数大小存在问题，可导致拒绝服务攻击。 -tmlentities/htmlspecialchars处理部分多字节序列存在问题。 -fnmatch, setlocale和glob函数的glibc实现存在缓冲区溢出。 Slackware Linux 10.2 Slackware Linux 10.1 Slackware Linux 12.0 Slackware Linux 11.0...
Remote code execution
PHP before 5.2.3 allows context-dependent attackers to cause a denial of service application crash via 1 a long string in the pattern parameter to the glob function; or 2 a long string in the string parameter to the fnmatch function, accompanied by a pattern parameter value with undefined...
CVE-2007-4782
PHP before 5.2.3 allows context-dependent attackers to cause a denial of service application crash via 1 a long string in the pattern parameter to the glob function; or 2 a long string in the string parameter to the fnmatch function, accompanied by a pattern parameter value with undefined...
CVE-2007-4782
PHP before 5.2.3 allows context-dependent attackers to cause a denial of service application crash via 1 a long string in the pattern parameter to the glob function; or 2 a long string in the string parameter to the fnmatch function, accompanied by a pattern parameter value with undefined...
PHP < 5.2.3 glob() denial of service
Application: PHP 5.2.3 Web Site: http://php.net Platform: unix Bug: denial of service fonction: glob special condition:default php memory-limit value =========== 1 Introduction 2 Bug 3 Proof of concept 4 greets 5 Credits =========== 1 Introduction =========== "PHP is a widely-used general-purpose...
CVE-2007-4661
The chunksplit function in string.c in PHP 5.2.3 does not properly calculate the needed buffer size due to precision loss when performing integer arithmetic with floating point numbers, which has unknown attack vectors and impact, possibly resulting in a heap-based buffer overflow. NOTE: this is...
CVE-2007-4661
CVE-2007-4661 affects PHP 5.2.3: the chunk_split function miscomputes the required buffer size due to precision loss in floating point arithmetic, which can lead to a heap-based buffer overflow. The description notes this stems from an incomplete fix for CVE-2007-2872 and lists the impact as unkn...