309 matches found
CVE-2010-4700
The setmagicquotesruntime function in PHP 5.3.2 and 5.3.3, when the MySQLi extension is used, does not properly interact with use of the mysqlifetchassoc function, which might make it easier for context-dependent attackers to conduct SQL injection attacks via crafted input that had been properly...
CVE-2010-4700
CVE-2010-4700 concerns PHP 5.3.2/5.3.3: when using the MySQLi extension, set_magic_quotes_runtime does not interact correctly with mysqli_fetch_assoc, potentially enabling context-dependent attackers to perform SQL injection with input that was previously sanitized in earlier PHP versions. Public...
CVE-2010-4700: Improper Neutralization of Special Elements used in an SQL Command
The setmagicquotesruntime function in PHP 5.3.2 and 5.3.3, when the MySQLi extension is used, does not properly interact with use of the mysqlifetchassoc function, which might make it easier for context-dependent attackers to conduct SQL injection attacks via crafted input that had been properly...
Ubuntu 6.06 LTS / 8.04 LTS / 8.10 / 9.04 : php5 vulnerability (USN-824-1)
It was discovered that PHP did not properly handle certain malformed JPEG images when being parsed by the Exif module. A remote attacker could exploit this flaw and cause the PHP server to crash, resulting in a denial of service. Note that Tenable Network Security has extracted the preceding...
Fedora Update for php-pear-MDB2-Driver-mysqli FEDORA-2007-3376
The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Fedora Update for php-pear-MDB2-Driver-mysqli FEDORA-2007-3369
Check for the Version of php-pear-MDB2-Driver-mysqli OpenVAS Vulnerability Test Fedora Update for php-pear-MDB2-Driver-mysqli FEDORA-2007-3369 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...
Fedora Update for php-pear-MDB2-Driver-mysqli FEDORA-2007-3376
Check for the Version of php-pear-MDB2-Driver-mysqli OpenVAS Vulnerability Test Fedora Update for php-pear-MDB2-Driver-mysqli FEDORA-2007-3376 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...
Fedora Update for php-pear-MDB2-Driver-mysqli FEDORA-2007-3369
The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Fedora 8 : phpMyAdmin-2.11.7.1-1.fc8 (2008-6450)
"This update solves a not yet clearly documented security issue with phpMyAdmin. - interface New field cannot be auto-increment and primary key - dbi Incorrect interpretation for some mysqli field flags - display part 1: do not display a TEXT utf8bin as BLOB fixed for mysqli extension only -...
Fedora 9 : phpMyAdmin-2.11.7-1.fc9 (2008-5676)
"This update solves PMASA-2008-4 phpMyAdmin security announcement from 2008-06-23: XSS on plausible insecure PHP installation; see http://www.phpmyadmin.net/homepage/security.php?issue=PMASA-2008-4 - interface New field cannot be auto-increment and primary key - dbi Incorrect interpretation for...
Fedora 7 : php-pear-MDB2-2.4.1-2.fc7 / php-pear-MDB2-Driver-mysql-1.4.1-3.fc7 / etc (2007-3369)
This update fixes a security flaw CVE-2007-5934 with critical impact. All users of php-pear-MDB2 are strongly advised to upgrade to these updated packages. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has...
Fedora 7 : php-pear-DB-1.7.11-1.fc7 (2007-0249)
1.7.11 : fbsql : - Fixed commit and rollback to specify the handle to be used. 1.7.10 : mysqli : - Added a type map for BIT fields. 1.7.9 : sybase : - Added divide by zero error mapping. - Added a specific quoteFloat implementation along the same lines as fbsql. - Updated tableInfo to cope with o...
PHP 4.4.75.2.3 - MySQLMySQLi Safe_Mode Bypass
PHP 4.4.75.2.3 - MySQLMySQLi SafeMode Bypass Affected Products: Philip Olausson Reported: 2007-06-05 Released: 2007-08-30 CVE: CVE-2007-3997 Issue: A vulnerability exists in PHP's MySQL and MySQLi extenstions which can be used to bypass PHP's safemode security restriction. Description: PHP is a...
PHP <= 4.4.7 / 5.2.3 MySQL/MySQLi Safe Mode Bypass Vulnerability
No description provided by source. Affected Products: = PHP 5.2.3 = PHP 4.4.7 Authors: Mattias Bengtsson [email protected] Philip Olausson [email protected] Reported: 2007-06-05 Released: 2007-08-30 CVE: CVE-2007-3997 Issue: A vulnerability exists in PHP's MySQL and MySQLi extenstions which can be use...
PHP 4.4.7/5.2.3 - MySQL/MySQLi 'Safe_Mode' Bypass
Affected Products: Philip Olausson Reported: 2007-06-05 Released: 2007-08-30 CVE: CVE-2007-3997 Issue: A vulnerability exists in PHP's MySQL and MySQLi extenstions which can be used to bypass PHP's safemode security restriction. Description: PHP is a widely-used general-purpose scripting language...
PHP MySQL/MySQLi扩展绕过安全限制漏洞
CVECAN ID: CVE-2007-3997 PHP是广泛使用的通用目的脚本语言，特别适合于Web开发，可嵌入到HTML中。 PHP的MySQL和MySQLi扩展在处理畸形数据的SQL请求时，远程攻击者可能利用此漏洞执行SQL注入攻击。 PHP的MySQL和MySQLi扩展没有正确地处理包含有LOCAL INFILE的SQL查询请求，如果远程攻击者向安装了这些扩展的服务器提交了恶意SQL请求的话，就可以绕过openbasedir和safemode安全限制，执行非授权操作。请注意不要依赖于共享主机MySQLd local-infile=0选项，因为这个选项是服务器选项，因此不会影响客户...
Design/Logic Flaw
The 1 MySQL and 2 MySQLi extensions in PHP 4 before 4.4.8, and PHP 5 before 5.2.4, allow remote attackers to bypass safemode and openbasedir restrictions via MySQL LOCAL INFILE operations, as demonstrated by a query with LOAD DATA LOCAL INFILE...
CVE-2007-3997
The 1 MySQL and 2 MySQLi extensions in PHP 4 before 4.4.8, and PHP 5 before 5.2.4, allow remote attackers to bypass safemode and openbasedir restrictions via MySQL LOCAL INFILE operations, as demonstrated by a query with LOAD DATA LOCAL INFILE...
CVE-2007-3997
CVE-2007-3997 affects the PHP MySQL and MySQLi extensions: PHP 4 before 4.4.8 and PHP 5 before 5.2.4 allow remote attackers to bypass open_basedir and safe_mode via MySQL LOCAL INFILE (demonstrated with LOAD DATA LOCAL INFILE). Impact is user-controlled file access bypass within affected PHP rele...
EUVD-2007-3981
The 1 MySQL and 2 MySQLi extensions in PHP 4 before 4.4.8, and PHP 5 before 5.2.4, allow remote attackers to bypass safemode and openbasedir restrictions via MySQL LOCAL INFILE operations, as demonstrated by a query with LOAD DATA LOCAL INFILE...