283 matches found
PHP mSQL (msql_connect) - Local Buffer Overflow (PoC)
PHP mSQL msqlconnect - Local Buffer Overflow PoC 42424242 ? milw0rm.com 2007-08-06...
PHP 5.2.3 glob() Remote DoS Exploit
?php //PHP 5.2.3 glob Remote DoS Exploit //author: shinnai //mail: shinnaiatautisticidotorg //site: http://shinnai.altervista.org //Tested on xp sp2, worked both from the cli EIP overwrite and on apache Denial of Service //Bug discovered with "Footzo" thanks to rgod. //To download Footzo:...
PHP php_gd2.dll imagepsloadfont Local Buffer Overflow PoC
No description provided by source. ?php / PHP imagepsloadfont Buffer Overflow Vulnerability Discovered Coded by: r0ut3r writ3r at gmail.com Vulnerable dll: phpgd2.dll - Tested on WinXP SP0, PHP/5.2.3, Apache 2.2.4 The argument given was A 9999 Access violation when reading 41414151...
CVE-2007-4033
Buffer overflow in the intT1EnvGetCompletePath function in lib/t1lib/t1env.c in t1lib 5.1.1 allows context-dependent attackers to execute arbitrary code via a long FileName parameter. NOTE: this issue was originally reported to be in the imagepsloadfont function in phpgd2.dll in the gd PHPGD2...
CVE-2007-4033
Buffer overflow in the intT1EnvGetCompletePath function in lib/t1lib/t1env.c in t1lib 5.1.1 allows context-dependent attackers to execute arbitrary code via a long FileName parameter. NOTE: this issue was originally reported to be in the imagepsloadfont function in phpgd2.dll in the gd PHPGD2...
CVE-2007-4010
The win32std extension in PHP 5.2.3 does not follow safemode and disablefunctions restrictions, which allows remote attackers to execute arbitrary commands via the winshellexecute function...
PHP 5.2.3 - PHP_gd2.dll imagepsloadfont Local Buffer Overflow (PoC)
PHP 5.2.3 - PHPgd2.dll imagepsloadfont Local Buffer Overflow PoC milw0rm.com 2007-07-26...
PHP 5.2.3 - 'PHP_gd2.dll' imagepsloadfont Local Buffer Overflow (PoC)
milw0rm.com 2007-07-26...
php 5.2.3 localexploit for win-vulnerability warning-the black bar safety net
Ghost earners note: the compressed package there are two files, respectively snmpexploit.php References //PHP = 5.2.3 snmpget object id local Buffer Overflow eip overwrite exploit //by GaRY wofeiwoatgmaildotcom //Based on by shinnai //Just change the shellcode //Tested on xp Pro sp2 cn...
PHP 5.2.3 win32std ext. safe_mode/disable_functions Protections Bypass
Exploit for unknown platform in category local exploits ====================================================================== PHP 5.2.3 win32std ext. safemode/disablefunctions Protections Bypass ====================================================================== 0day.today 2018-01-04...
PHP 5.2.3 win32std ext. safe_mode/disable_functions Protections Bypass
No description provided by source. ?php //PHP 5.2.3 win32std extension safemode and disablefunctions protections bypass //author: shinnai //mail: shinnaiatautisticidotorg //site: http://shinnai.altervista.org //Tested on xp Pro sp2 full patched, worked both from the cli and on apache //Thanks to...
PHP 5.2.3 Win32std - win_shell_execute Safe Mode Disable Functions Bypass
PHP 5.2.3 Win32std - winshellexecute Safe Mode Disable Functions Bypass milw0rm.com 2007-07-24...
PHP 5.2.3 Win32std - win_shell_execute Safe Mode disable_functions Bypass
PHP 5.2.3 Win32std - winshellexecute Safe Mode disablefunctions Bypass milw0rm.com 2007-07-24...
PHP <= 5.2.3 snmpget() object id Local Buffer Overflow Exploit
No description provided by source. ?php //PHP = 5.2.3 snmpget object id local Buffer Overflow eip overwrite exploit //bug discovered by rgod //Original advisory: http://retrogod.altervista.org/php446snmpgetlocalbof.html //quote="rgod"more than 256 chars result in simple eip overwrite/quote...
php523-snmpget.txt
?php //PHP = 5.2.3 snmpget object id local Buffer Overflow eip overwrite exploit //bug discovered by rgod //Original advisory: http://retrogod.altervista.org/php446snmpgetlocalbof.html //quote="rgod"more than 256 chars result in simple eip overwrite/quote //right! so here it is an exploit using e...
PHP 5.2.3 - snmpget() Object id Local Buffer Overflow
PHP 5.2.3 - snmpget Object id Local Buffer Overflow ?php //PHP = 5.2.3 snmpget object id local Buffer Overflow eip overwrite exploit //bug discovered by rgod //Original advisory: http://retrogod.altervista.org/php446snmpgetlocalbof.html //quote="rgod"more than 256 chars result in simple eip...
CVE-2007-3806
The glob function in PHP 5.2.3 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via an invalid value of the flags parameter, probably related to memory corruption or an invalid read on win32 platforms, and possibly related to lack of initializati...