145 matches found
PHP 5.2 Session.Save_Path() Safe_Mode and Open_Basedir Restriction Bypass Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/21508/info PHP is prone to a 'safemode' and 'openbasedir' restriction-bypass vulnerability. Successful exploits could allow an attacker to access sensitive information or to write files in unauthorized locations. This...
PT-2014-2037
Name of the Vulnerable Software and Affected Versions PHP versions 5.x Description The issue allows remote attackers to bypass the open basedir protection mechanism and read arbitrary files. This is achieved through vectors involving a stream close method call during the use of a custom stream...
PT-2013-1332
Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.3.22 PHP versions 5.4.x prior to 5.4.13 Description The issue is related to errors in privilege management in the ext/soap/soap.c component of the PHP interpreter. It allows a remote attacker to elevate their privileges...
Slackware: Security Advisory (SSA:2006-230-02)
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
PT-2012-1226
Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.3.15 Description The issue concerns the SQLite functionality in PHP, which is related to errors in privilege management. This allows remote attackers to bypass the open basedir protection mechanism. Recommendations For...
PT-2010-4822
Name of the Vulnerable Software and Affected Versions PHP versions 5.3.x through 5.3.3 Description The issue allows remote attackers to bypass open basedir restrictions via vectors related to the length of a filename. This is related to the fopen wrappers.c in PHP. Recommendations For PHP version...
PHP-Fusion - Local File Inclusion
Exploit Title: PHP-Fusion Local File Includes Vulnerability Date: 2010/08/15 Author: MoDaMeR Email: [email protected] My Sites : www.v4-team.com & www.hackteach.org Script home: http://www.phpfusion-ar.com download Script: http://www.phpfusion-ar.com/downloads.php?catid=1&downloadid=91 Version:all Tested...
Madirish Webmail 2.01 - 'baseDir' Local/Remote File Inclusion
===================================================== Madirish Webmail 2.01 basedir RFI/LFI Vulnerability ===================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1...
CVE-2009-4143
PHP before 5.2.12 does not properly handle session data, which has unspecified impact and attack vectors related to 1 interrupt corruption of the SESSION superglobal array and 2 the session.savepath directive...
PHP 5.2.x < 5.2.12 Multiple Vulnerabilities
Binary data 5281.prm...
PHP 5.3.x < 5.3.1 Multiple Vulnerabilities
Binary data 801090.prm...
PHP 5.2.9 Bypass Exploit
?php / SecurityReason.com - Security Audit Stuff PHP 5.2.9 curl safemode & openbasedir bypass http://securityreason.com/achievementsecurityalert/61 exploit from "SecurityReason - Security Audit" lab. for legal use only http://securityreason.com/achievementexploitalert/11 author: Maksymilian...
Remote file inclusion
Multiple PHP remote file inclusion vulnerabilities in Broadcast Machine 0.1 allow remote attackers to execute arbitrary PHP code via a URL in the baseDir parameter to 1 MySQLController.php, 2 SQLController.php, 3 SetupController.php, 4 VideoController.php, and 5 ViewController.php in controllers/...
CVE-2008-6287
Broadcast Machine 0.1 is vulnerable to multiple PHP remote file inclusion (RFI) flaws in controllers/. The baseDir parameter in (1) MySQLController.php, (2) SQLController.php, (3) SetupController.php, (4) VideoController.php, and (5) ViewController.php can be abused to execute arbitrary PHP code ...
CVE-2008-6287: Improper Control of Generation of Code
Multiple PHP remote file inclusion vulnerabilities in Broadcast Machine 0.1 allow remote attackers to execute arbitrary PHP code via a URL in the baseDir parameter to 1 MySQLController.php, 2 SQLController.php, 3 SetupController.php, 4 VideoController.php, and 5 ViewController.php in controllers/...
broadcast-rfi.txt
================================================================================================================= o Broadcast Machine 0.1 Multiple Remote File Inclusion Vulnerability Software : Broadcast Machine version 0.1 Vendor : http://code.google.com/p/broadcastmachine/ View Source :...
6rbScript 3.3 (section.php name) Local File Inclusion Vulnerability
Exploit for unknown platform in category web applications =================================================================== 6rbScript 3.3 section.php name Local File Inclusion Vulnerability =================================================================== || | | 6rbScript V3.3 Local file...
php -- input validation error in safe_mode
According to Maksymilian Arciemowicz research, it is possible to bypass security restrictions of safemode in various functions via directory traversal vulnerability. The attacker can use this attack to gain access to sensitive information. Functions utilizing expandfilepath may be affected. It...
Cross site scripting
Cross-site scripting XSS vulnerability in phpstats.php in Michael Wagner phpstats 0.1 alpha allows remote attackers to inject arbitrary web script or HTML via the baseDir parameter...
