971 matches found
php security update
CentOS Errata and Security Advisory CESA-2007:0076 Updated PHP packages that fix several security issues are now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having important security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting...
phpmyprofilerRFI.txt
Author: [email protected] mozi phpMyProfiler Remote File Inclusion Vulnerability Greetz: Raver phpfreaks eu.undernet.org ------------------------------------------------------------------ Download: http://sourceforge.net/projects/phpmyprofiler...
phpMyProfiler 0.9.6 - Remote File Inclusion
phpMyProfiler 0.9.6 - Remote File Inclusion Author: [email protected] mozi phpMyProfiler Remote File Inclusion Vulnerability Greetz: Raver phpfreaks eu.undernet.org ------------------------------------------------------------------ Download: http://sourceforge.net/projects/phpmyprofiler...
phpMyProfiler <= 0.9.6 Remote File Include Vulnerability
Exploit for unknown platform in category web applications ======================================================== phpMyProfiler = 0.9.6 Remote File Include Vulnerability ======================================================== phpMyProfiler Remote File Inclusion Vulnerability...
phpMyProfiler <= 0.9.6 Remote File Include Vulnerability
No description provided by source. Author: [email protected] mozi phpMyProfiler Remote File Inclusion Vulnerability Greetz: Raver phpfreaks eu.undernet.org ------------------------------------------------------------------ Download: http://sourceforge.net/projects/phpmyprofiler...
phpMyProfiler 0.9.6 - Remote File Inclusion
Author: [email protected] mozi phpMyProfiler Remote File Inclusion Vulnerability Greetz: Raver phpfreaks eu.undernet.org ------------------------------------------------------------------ Download: http://sourceforge.net/projects/phpmyprofiler...
php security update
CentOS Errata and Security Advisory CESA-2006:0669 Updated PHP packages that fix multiple security issues are now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting...
Mafia Moblog <= 6 (pathtotemplate) Remote File Inclusion Vulnerability
------------------------------------------------------------------------ ------------------- Mafia Moblog pathtotemplate Remote File Inclusion ------------------------------------------------------------------------ ------------------- Author : Sh3ll Date : 2006/04/30 HomePage : http://www.sh3ll....
CentOS 3 / 4 : php (CESA-2005:748)
Updated PHP packages that fix a security issue are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Web server. A bug was discovered in the PEAR XML-RP...
CentOS 3 / 4 : php (CESA-2005:564)
Updated PHP packages that fix two security issues are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Web server. A bug was discovered in the PEAR...
V-Webmail <= 1.6.4 (pear_dir) Remote File Include Vulnerability
Exploit for unknown platform in category web applications =============================================================== V-Webmail Vulnerable File v-webmail/includes/pear//.php = requireonce $CONFIG'peardir' . '.php'; v-webmail/includes/mailaccess/pop3.php = requireonce$CONFIG'peardir'...
FreeBSD : pear-PEAR -- PEAR installer arbitrary code execution vulnerability (44e5f5bd-4d76-11da-bf37-000fb586ba73)
Gregory Beaver reports : A standard feature of the PEAR installer implemented in all versions of PEAR can lead to the execution of arbitrary PHP code upon running the 'pear' command or loading the Web/Gtk frontend. To be vulnerable, a user must explicitly install a publicly released malicious...
FreeBSD : pear-XML_RPC -- remote PHP code injection vulnerability (e65ad1bf-0d8b-11da-90d0-00304823c0d3)
A Hardened-PHP Project Security Advisory reports : When the library parses XMLRPC requests/responses, it constructs a string of PHP code, that is later evaluated. This means any failure to properly handle the construction of this string can result in arbitrary execution of PHP code. This new...
GLSA-200603-13 : PEAR-Auth: Potential authentication bypass
The remote host is affected by the vulnerability described in GLSA-200603-13 PEAR-Auth: Potential authentication bypass Matt Van Gundy discovered that PEAR-Auth did not correctly validate data passed to the DB and LDAP containers. Impact : A remote attacker could possibly exploit this vulnerabili...
PEAR-Auth: Potential authentication bypass
Background PEAR-Auth is a PEAR package that provides methods to create a PHP based authentication system. Description Matt Van Gundy discovered that PEAR-Auth did not correctly validate data passed to the DB and LDAP containers. Impact A remote attacker could possibly exploit this vulnerability t...
CVE-2005-4731
The Next action in PEAR HTMLQuickFormController 1.0.4 includes the SID in the URL even when session.useonlycookies is configured, which allows remote attackers to obtain the SID via an HTTP Referer field and possibly other vectors...
CVE-2005-4731
CVE-2005-4731 affects PEAR HTML_QuickForm_Controller 1.0.4 where the Next action includes the session ID in the URL despite session.use_only_cookies being configured. This enables an external attacker to obtain the SID via the HTTP Referer field and possibly other vectors, exposing partial confid...
CVE-2005-4730
Technical details (affected versions, impact, exploit info, and remediation) for CVE-2005-4730 are not publicly provided in the supplied documents. Monitor for updates.
CVE-2005-4730
Unspecified vulnerability in PEAR TextPassword 1.0 has unknown impact and attack vectors, related to "problematic seeding" of the random number generator, possibly predictable seeds...
CVE-2006-0931
Directory traversal vulnerability in PEAR::ArchiveTar 1.2, and other versions before 1.3.2, allows remote attackers to create and overwrite arbitrary files via certain crafted pathnames in a TAR archive...