284 matches found
CVE-2007-3790
The comprinttypeinfo function in the bz2 extension in PHP 5.2.3 allows context-dependent attackers to cause a denial of service via a long argument...
PHP 5.2.3 glob() Denial of Service Exploit
No description provided by source. ?php //PHP 5.2.3 glob Remote DoS Exploit //author: shinnai //mail: shinnaiatautisticidotorg //site: http://shinnai.altervista.org //Tested on xp sp2, worked both from the cli EIP overwrite and on apache Denial of Service...
PHP 5.2.3 glob() Denial of Service Exploit
Exploit for multiple platform in category dos / poc ========================================== PHP 5.2.3 glob Denial of Service Exploit ========================================== 0day.today 2018-04-09...
PHP 5.2.3 - 'glob()' Denial of Service
milw0rm.com 2007-07-14...
PHP 5.2.3 bz2 com_print_typeinfo() Denial of Service Exploit
No description provided by source. ?php //PHP 5.2.3 bz2 comprinttypeinfo Remote DoS Exploit //author: shinnai //mail: shinnaiatautisticidotorg //site: http://shinnai.altervista.org //Tested on xp sp2, worked both from the cli and on apache //Bug discovered with "Footzo" thanks to rgod. //...
PHP 5.2.3 - bz2 com_print_typeinfo() Denial of Service
PHP 5.2.3 - bz2 comprinttypeinfo Denial of Service milw0rm.com 2007-07-12...
PHP 5.2.3 bz2 com_print_typeinfo() Denial of Service Exploit
Exploit for multiple platform in category dos / poc ============================================================ PHP 5.2.3 bz2 comprinttypeinfo Denial of Service Exploit ============================================================ 0day.today 2018-03-12...
Buffer overflow
Multiple buffer overflows in libtidy, as used in the Tidy extension for PHP 5.2.3 and possibly other products, allow context-dependent attackers to execute arbitrary code via 1 a long second argument to the tidyparsestring function or 2 an unspecified vector to the tidyrepairstring function. NOTE...
CVE-2007-3294
Multiple buffer overflows in libtidy, as used in the Tidy extension for PHP 5.2.3 and possibly other products, allow context-dependent attackers to execute arbitrary code via 1 a long second argument to the tidyparsestring function or 2 an unspecified vector to the tidyrepairstring function. NOTE...
CVE-2007-3294
Multiple buffer overflows in libtidy, as used in the Tidy extension for PHP 5.2.3 and possibly other products, allow context-dependent attackers to execute arbitrary code via 1 a long second argument to the tidyparsestring function or 2 an unspecified vector to the tidyrepairstring function. NOTE...
CVE-2007-3294
CVE-2007-3294 involves multiple buffer overflows in libtidy used by the Tidy extension for PHP 5.2.3 (and possibly other products). The described vectors are: (1) a long second argument to tidy_parse_string and (2) an unspecified vector to tidy_repair_string; note that the issue may depend on env...
CVE-2007-3294
Multiple buffer overflows in libtidy, as used in the Tidy extension for PHP 5.2.3 and possibly other products, allow context-dependent attackers to execute arbitrary code via 1 a long second argument to the tidyparsestring function or 2 an unspecified vector to the tidyrepairstring function. NOTE...
php523-overflow.txt
?php //PHP 5.2.3 tidyparsestring & tidyrepairstring local //buffer overflow poc win //rgod //site: retrogod.altervista.org //quickly tested on xp sp2, worked both from the cli and on apache //let's have a look here: http://www.google.com/codesearch?hl=it&q=+tidyparsestring&sa=N if...
PHP 5.2.3 'Tidy' Extension - Local Buffer Overflow
?php //PHP 5.2.3 tidyparsestring & tidyrepairstring local //buffer overflow poc win //rgod //site: retrogod.altervista.org //quickly tested on xp sp2, worked both from the cli and on apache //let's have a look here: http://www.google.com/codesearch?hl=it&q=+tidyparsestring&sa=N if...
PHP 5.2.3 Tidy extension Local Buffer Overflow Exploit
Exploit for unknown platform in category local exploits ====================================================== PHP 5.2.3 Tidy extension Local Buffer Overflow Exploit ====================================================== ?php //PHP 5.2.3 tidyparsestring & tidyrepairstring local //buffer overflow...
CVE-2007-3007
PHP 5 before 5.2.3 does not enforce the openbasedir or safemode restriction in certain cases, which allows context-dependent attackers to determine the existence of arbitrary files by checking if the readfile function returns a string. NOTE: this issue might also involve the realpath function...
PHP chunk_split()函数整数溢出漏洞
PHP是一种流行的WEB服务器端编程语言。 PHP中的chunksplit函数在处理畸形参数时存在整数溢出漏洞，本地攻击者可能利用此漏洞提升自己的权限。 PHP中chunksplit函数的1963行试图为函数结果分配充分的内存大小，但没有执行任何检查便使用了srclen和chunklen参数块。如果值的块和endlen大于65534字节的话，就会触发整数溢出，分配错误的内存大小，导致堆溢出。 ext/standard/string.c： 1953 static char phpchunksplitchar src, int srclen, char end, int endlen, in...
PHP 5.2.3 - EXTSession HTTP Response Header Injection
PHP 5.2.3 - EXTSession HTTP Response Header Injection source: https://www.securityfocus.com/bid/24268/info PHP is prone to an HTTP-response-header-injection vulnerability because it fails to sanitize user-supplied input. An attacker can exploit this issue to inject additional cookie attributes in...
PHP EXT/Session HTTP应答头注入漏洞
PHP是一款广泛使用的WEB开发脚本语言。 PHP的ext/session在置于会话COOKIE前没有URL编码会话ID，远程攻击者可以利用漏洞可以对会话COOKIE进行注入攻击。 当PHP' ext/session调用sessionstart，会在部分情况下发送新会话COOKIE，这些情况如下： - session id嵌入到PATHINFO - session id重生成 - session id通过sessionid设置 - sessionstart多次调用...