Bharat Mediratta Gallery 1.x - Remote File Inclusion

Bharat Mediratta Gallery 1.x - Remote File Inclusion source: https://www.securityfocus.com/bid/5375/info Gallery is prone to an issue which may allow remote attackers to include arbitrary files located on remote servers. This issue is present in several PHP script files provided with Gallery. An...

OpenBB 1.0.0 RC3 - Cross-Site Scripting

source: https://www.securityfocus.com/bid/4824/info OpenBB is web forum software written in PHP. It will run on most Linux and Unix variants, in addition to Microsoft Windows operating systems. It has been reported that OpenBB is vulnerable to a cross-site scripting attack. Attackers may exploit...

Phorum 3.3.2a - Remote Command Execution

source: https://www.securityfocus.com/bid/4763/info Phorum is a PHP based web forums package designed for most UNIX variants, Linux, and Microsoft Windows operating systems. A vulnerability has been reported in Phorum that will allow remote attackers to specify external PHP scripts and potentiall...

Phorum 3.3.2a - Remote Command Execution

Phorum 3.3.2a - Remote Command Execution source: https://www.securityfocus.com/bid/4763/info Phorum is a PHP based web forums package designed for most UNIX variants, Linux, and Microsoft Windows operating systems. A vulnerability has been reported in Phorum that will allow remote attackers to...

PHProjekt multiple vulnerabilities

PHProjekt multiple vulnerabilities PROGRAM: PHProjekt VENDOR: Albrecht Guenther [email protected] et al. HOMEPAGE: http://www.phprojekt.com/ VULNERABLE VERSIONS: all versions below 3.2 LOGIN REQUIRED: yes some issues, no some issues SEVERITY: high DESCRIPTION: "PHProjekt is a groupware suite which...

CVE-2001-0777

CVE-2001-0777 affects Omnicron OmniHTTPd 2.0.8. Remote attackers can cause a denial of service via memory exhaustion by a series of requests for PHP scripts. CVSS v2: AV:N/AC:L/Au:N/C:N/I:N/A:P, base score 5.0 (Medium); network vector, no authentication, partial availability impact.

CVE-2001-0777

Omnicron OmniHTTPd 2.0.8 allows remote attackers to cause a denial of service memory exhaustion via a series of requests for PHP scripts...

CVE-2001-0777: Undefined Security Weakness

Omnicron OmniHTTPd 2.0.8 allows remote attackers to cause a denial of service memory exhaustion via a series of requests for PHP scripts...

Дырки во многих php-скриптах (directory traversal, code execution)

Можно прочитать любой файл, выполнить PHP-скрипты...

FreeBSD-SA-00:75.php

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:75 Security Advisory FreeBSD, Inc. Topic: modphp3/modphp4 allows remote code execution Category: ports Module: modphp3/modphp4 Announced: 2000-11-20 Credits: Jouko...

PHP Security Advisory - File Uploads

Problem ======== PHP supports RFC 1867 based file uploads. PHP saves uploaded files in a temporary directory on the server, using a temporary name. This temporary name is exposed to the PHP script as $FOO, where "FOO" is the name of the file input tag in the submitted form. Many PHP scripts proce...