2151 matches found
CVE-2020-7068
In PHP versions 7.2.x below 7.2.33, 7.3.x below 7.3.21 and 7.4.x below 7.4.9, while processing PHAR files using phar extension, pharparsezipfile could be tricked into accessing freed memory, which could lead to a crash or information disclosure...
Insecure File Permissions
PHP7 uses insecure file permissions. When creating PHAR archives using the PharData::buildFromIterator function, the files are added with default permissions 0666 even if the original files on the filesystem configured with more restrictive permissions, allowing any local user to access the files...
CVE-2020-7068
In PHP versions 7.2.x below 7.2.33, 7.3.x below 7.3.21 and 7.4.x below 7.4.9, while processing PHAR files using phar extension, pharparsezipfile could be tricked into accessing freed memory, which could lead to a crash or information disclosure...
Internet Bug Bounty: Use after free vulnerability in phar_parse_zipfile
Malformed phar file with cache configuration leads freed memory as hash key when it inserts into the hash table. More detail information and original report is here: https://bugs.php.net/bug.php?id=79797 and it was assigned CVE-2020-7068. Impact Through this vulnerability that inserts freed memor...
PT-2020-5864 · Php +9 · Php +9
Name of the Vulnerable Software and Affected Versions: PHP versions 7.2.x through 7.2.32 PHP versions 7.3.x through 7.3.20 PHP versions 7.4.x through 7.4.8 Description: The issue is related to the phar parse zipfile function in PHP, which can be tricked into accessing freed memory when processing...
EulerOS 2.0 SP8 : php (EulerOS-SA-2020-1821)
According to the versions of the php packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In PHP versions 7.2.x below 7.2.28, 7.3.x below 7.3.15 and 7.4.x below 7.4.3, when creating PHAR archive using PharData::buildFromIterator function...
CVE-2020-11476
Concrete5 before 8.5.3 allows Unrestricted Upload of File with Dangerous Type such as a .phar file...
CVE-2020-11476
Concrete5 before 8.5.3 allows Unrestricted Upload of File with Dangerous Type such as a .phar file...
Unrestricted file upload
Concrete5 before 8.5.3 allows Unrestricted Upload of File with Dangerous Type such as a .phar file...
CVE-2020-11476
Concrete5 before 8.5.3 allows Unrestricted Upload of File with Dangerous Type such as a .phar file...
PT-2020-12634
Name of the Vulnerable Software and Affected Versions Concrete5 versions prior to 8.5.3 Description The issue allows for the unrestricted upload of files with dangerous types, such as .phar files. Recommendations For versions prior to 8.5.3, update to version 8.5.3 or later to resolve the issue...
CVE-2020-11476: Unrestricted Upload of File with Dangerous Type
Concrete5 before 8.5.3 allows Unrestricted Upload of File with Dangerous Type such as a .phar file...
Concrete CMS: Arbitrary File delete via PHAR deserialization
crayons : Concrete5 Arbitrary File delete via PHAR deserialization - Target: Concrete5 - Version: 8.5.4 Latest at 2020. 07. 12 / PHP 7.2 - Credit: WSP Lab@KAIST - Contact: [email protected] TL; DR - An attacker can send an arbitrary input value in the isdir function, which causes a PHAR...
The vulnerability of the phar_parse_pharfile function (xt/phar/phar.c) in the PHP programming language allows a malicious actor to gain unauthorized access to protected information.
The vulnerability of the pharparsepharfile function xt/phar/phar.c in the PHP programming language involves reading beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
TCPDF Phar Insecure Deserialization (CVE-2018-17057)
A remote code execution vulnerability exists in LimeSurvey. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
The vulnerability of the phar_tar_writeheaders_int function (ext/phar/tar.c) in the PHP programming language allows a hacker to execute arbitrary code.
The vulnerability of the phartarwriteheadersint function ext/phar/tar.c in the PHP programming language is related to the execution of operations outside of the buffer. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
PHAR Deserialization
phpmussel is vulnerable to PHAR deserialization. It is due to a flaw in the way PHAR wrapper was implemented in phpmussel for scanning archives when checkarchives is set to true, allowing an attacker to upload malicious file to trigger a remote code execution...
CVE-2020-4043
phpMussel from versions 1.0.0 and less than 1.6.0 has an unserialization vulnerability in PHP's phar wrapper. Uploading a specially crafted file to an affected version allows arbitrary code execution discovered, tested, and confirmed by myself, so the risk factor should be regarded as very high...
Code injection
phpMussel from versions 1.0.0 and less than 1.6.0 has an unserialization vulnerability in PHP's phar wrapper. Uploading a specially crafted file to an affected version allows arbitrary code execution discovered, tested, and confirmed by myself, so the risk factor should be regarded as very high...
