Ubuntu 18.04 LTS / 20.04 LTS : PHP vulnerabilities (USN-5006-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5006-1 advisory. It was discovered that PHP incorrectly handled certain PHAR files. A remote attacker could possibly use this issue to cause PHP to crash,...

GetSimple CMS Remote Code Execution Vulnerability (CNVD-2021-45301)

GetSimple CMS is an XML-based, completely self-contained, streamlined content management system. A remote code execution vulnerability exists in admin/upload.php in GetSimple CMS versions prior to 3.3.16. An attacker can exploit this vulnerability to achieve remote code execution via phar files...

CVE-2021-28976

Remote Code Execution vulnerability in GetSimpleCMS before 3.3.16 in admin/upload.php via phar filess...

CVE-2021-28976

CVE-2021-28976 affects GetSimpleCMS versions prior to 3.3.16, with a remote code execution vulnerability in admin/upload.php exploitable through PHAR file uploads. The connected sources confirm a phar-based attack chain leading to RCE (e.g., PoCs and exploits in Exploit-DB/PacketStorm) and indica...

CVE-2021-28976

Remote Code Execution vulnerability in GetSimpleCMS before 3.3.16 in admin/upload.php via phar filess...

The vulnerability of the Admidio membership management and access control application lies in its ability to download files of a dangerous type without limitation, allowing a perpetrator to execute arbitrary code.

The vulnerability of the Admidio membership management and access control application lies in the ability to download unlimited files of a dangerous type. Exploiting this vulnerability could allow an attacker operating remotely to execute arbitrary code using specially created .phar files...

PT-2021-3442

Name of the Vulnerable Software and Affected Versions elFinder versions prior to 2.1.58 Description The issue is related to the execution of PHP code in a .phar file, which can lead to Remote Code Execution RCE. This only applies if the server parses .phar files as PHP. The vulnerability is...

Remote Code Execution (RCE)

Overview studio-42/elfinder is an open-source file manager for web, written in JavaScript using jQuery UI. Affected versions of this package are vulnerable to Remote Code Execution RCE via execution of PHP code in a .phar file. NOTE: This only applies if the server is configured to parse .phar...

PHP: Denial of service

Background PHP is an open source general-purpose scripting language that is especially suited for web development. Description It was discovered that PHP did not properly handle PHAR files. Impact A remote attacker could entice a user to open a specially crafted PHAR file using PHP, possibly...

[SECURITY] [DLA 2345-1] php7.0 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2345-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb August 26, 2020 https://wiki.debian.org/LTS -...

CVE-2020-7068

In PHP versions 7.2.x below 7.2.33, 7.3.x below 7.3.21 and 7.4.x below 7.4.9, while processing PHAR files using phar extension, pharparsezipfile could be tricked into accessing freed memory, which could lead to a crash or information disclosure...

php: Buffer over-read in PHAR reading functions

In PHP before 5.6.39, 7.x before 7.0.33, 7.1.x before 7.1.25, and 7.2.x before 7.2.13, a buffer over-read in PHAR reading functions may allow an attacker to read allocated or unallocated memory past the actual data when trying to parse a .phar file. This is related to pharparsepharfile in...

Medium: php73

Issue Overview: In PHP versions 7.3.x below 7.3.15 and 7.4.x below 7.4.3, while extracting PHAR files on Windows using phar extension, certain content inside PHAR file could lead to one-byte read past the allocated buffer. This could potentially lead to information disclosure or crash...

CVE-2020-7061

In PHP versions 7.3.x below 7.3.15 and 7.4.x below 7.4.3, while extracting PHAR files on Windows using phar extension, certain content inside PHAR file could lead to one-byte read past the allocated buffer. This could potentially lead to information disclosure or crash...

CVE-2020-7061

In PHP versions 7.3.x below 7.3.15 and 7.4.x below 7.4.3, while extracting PHAR files on Windows using phar extension, certain content inside PHAR file could lead to one-byte read past the allocated buffer. This could potentially lead to information disclosure or crash...

The vulnerability of the Phar utility in the Drupal CMS system allows a hacker to execute arbitrary code.

The vulnerability of the phar utility in the Drupal CMS system is related to insufficient validation of entered data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created file with the .phar extension...

TYPO3 PharStreamWrapper Remote Code Execution Vulnerability

TYPO3 PharStreamWrapper is an interceptor for stream processing from the Swiss TYPO3 Association. Drupal core third-party class library TYPO3/PharStreamWrapper package 2.1.1 before version 2.x and 3.1.1 before version 3.x there is a deserialization protection mechanism can be bypassed leading to...

CVE-2019-7743

An issue was discovered in Joomla! before 3.9.3. The phar:// stream wrapper can be used for objection injection attacks because there is no protection mechanism such as the TYPO3 PHAR stream wrapper to prevent use of the phar:// handler for non .phar-files...

Arbitrary Code Execution

intelliants/subrion is vulnerable to arbitrary code execution attacks. The vulnerability exists due to the lack of blacklist against .pht or .phar files in /panel/uploads, allowing such files to be uploaded and subsequently executed...

Subrion CMS Arbitrary PHP Code Execution Vulnerability

Subrion CMS is a PHP-based content management system CMS developed by the Subrion team. The system can be integrated into a website and supports a wide range of extensions plug-ins and more. A security vulnerability exists in /panel/uploads in Subrion CMS version 4.2.1, which stems from the failu...