[SECURITY] Fedora 26 Update: php-pear-PHP-CodeSniffer-3.0.1-1.fc26

PHPCodeSniffer provides functionality to verify that code conforms to certain standards, such as PEAR, or user-defined...

Arbitrary shell execution

Security Advisory - This release contains a fix for a security advisory related to the improper handling of a shell command - A properly crafted filename would allow for arbitrary code execution when using the --filter=gitmodified command line option - All version 3 users are encouraged to upgrad...

Fedora 24 : php-pear-CAS (2017-d9d620366e)

Changes in version 1.3.5 - Security Fixes : - Fix possible authentication bypass in validateCAS20 228 Gregory Boddin - Bug Fixes : - Fix file permissions non-executable 177 Remi Collet - Fixed translations Greek and Japanese 192 ikari7789 - Fix errors under phpdbg 204 MasonM - Fix logout...

Fedora Update for php-pear-CAS FEDORA-2017-d9d620366e

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 25 Update: php-pear-CAS-1.3.5-1.fc25

This package is a PEAR library for using a Central Authentication Service. Autoloader '%pearphpdir/CAS/Autoload.php';...

[SECURITY] Fedora 26 Update: php-pear-CAS-1.3.5-1.fc26

This package is a PEAR library for using a Central Authentication Service. Autoloader '%pearphpdir/CAS/Autoload.php';...

Fedora Update for php-pear-PHP-CodeSniffer FEDORA-2017-aaf92c483c

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for php-pear-PHP-CodeSniffer FEDORA-2017-ca3f01bd37

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 25 Update: php-pear-PHP-CodeSniffer-2.8.1-1.fc25

PHPCodeSniffer provides functionality to verify that code conforms to certain standards, such as PEAR, or user-defined...

[SECURITY] Fedora 24 Update: php-pear-PHP-CodeSniffer-2.8.1-1.fc24

PHPCodeSniffer provides functionality to verify that code conforms to certain standards, such as PEAR, or user-defined...

Pear HTTP_Upload 1.0. 0b3 - arbitrary file upload

Vulnerability description Vulnerability impact: Pear HTTPUpload 1.0. 0b3 Download: https://pear.php.net/manual/en/package.http.http-upload.php Vulnerability type: arbitrary file upload Pear HTTPUpload profile: Pear's HTTPUpload class library provides a good package of html form file upload handle...

PEAR HTML_AJAX PHP Object Injection Vulnerability

PEAR full name PHPExtensionandApplicationRepository is responsible for maintaining the PHPGroup a PHP extension and application code repository. HTMLAJAX is one of the PHP and JavaScript libraries provided for the implementation of AJAX. A PHP object injection vulnerability exists in PHPSerialize...

CVE-2017-5677

PEAR HTMLAJAX 0.3.0 through 0.5.7 has a PHP Object Injection Vulnerability in the PHP Serializer. It allows remote code execution. In one viewpoint, the root cause is an incorrect regular expression...

CVE-2017-5677

Summary: CVE-2017-5677 affects PEAR HTML_AJAX versions 0.3.0–0.5.7. The vulnerability is a PHP Object Injection in the HTML_AJAX_Serializer_PHP class, which uses unserialize() on user-controlled input. The root cause is described as an incorrect regular expression used to extract class names, all...

CVE-2017-5677

PEAR HTMLAJAX 0.3.0 through 0.5.7 has a PHP Object Injection Vulnerability in the PHP Serializer. It allows remote code execution. In one viewpoint, the root cause is an incorrect regular expression...

Pear HTTP_Upload 1.0. 0b3 - arbitrary file upload

No description provided by source...

PHP PEAR Arbitrary File Download Vulnerability

PEAR the PHP Extension and Application Repository, that is, PHP Extension and Application Repository. An arbitrary file download vulnerability exists in PHP PEAR. An attacker can exploit this vulnerability to bypass security restrictions and gain unauthorized access...

CVE-2017-5630

A vulnerability was found in php-pear where if a malicious server responded to a pear Mitigation This vulnerability only allows files in the current directory to be overwritten, so using pear download in a temporary directory effectively mitigates the risk of a dangerous file overwrite occurring...

CVE-2017-5630

PECL in the download utility class in the Installer in PEAR Base System v1.10.1 does not validate file types and filenames after a redirect, which allows remote HTTP servers to overwrite files via crafted responses, as demonstrated by a .htaccess overwrite...

DEBIAN-CVE-2017-5630

PECL in the download utility class in the Installer in PEAR Base System v1.10.1 does not validate file types and filenames after a redirect, which allows remote HTTP servers to overwrite files via crafted responses, as demonstrated by a .htaccess overwrite...