phpfastcache - phpinfo Resource Exposure

phpinfo is susceptible to resource exposure in unprotected composer vendor folders via phpfastcache/phpfastcache. id: CVE-2021-37704 info: name: phpfastcache - phpinfo Resource Exposure author: whoever severity: medium description: phpinfo is susceptible to resource exposure in unprotected compos...

CVE-2019-16774

In phpfastcache before 5.1.3, there is a possible object injection vulnerability in cookie driver...

EUVD-2019-0775

Malware in sbrugna...

CVE-2021-37704

PhpFastCache is a high-performance backend cache system packagist package phpfastcache/phpfastcache. In versions before 6.1.5, 7.1.2, and 8.0.7 the phpinfo can be exposed if the /vendor is not protected from public access. This is a rare situation today since the vendor directory is often located...

Information Disclosure

phpfastcache is vulnerable to information disclosure. The vulnerability exists due to the exposure of phpinfo when the /vendor is not protected from public access...

CVE-2021-37704

PhpFastCache is a high-performance backend cache system packagist package phpfastcache/phpfastcache. In versions before 6.1.5, 7.1.2, and 8.0.7 the phpinfo can be exposed if the /vendor is not protected from public access. This is a rare situation today since the vendor directory is often located...

CVE-2021-37704

PhpFastCache is a high-performance backend cache system packagist package phpfastcache/phpfastcache. In versions before 6.1.5, 7.1.2, and 8.0.7 the phpinfo can be exposed if the /vendor is not protected from public access. This is a rare situation today since the vendor directory is often located...

Design/Logic Flaw

PhpFastCache is a high-performance backend cache system packagist package phpfastcache/phpfastcache. In versions before 6.1.5, 7.1.2, and 8.0.7 the phpinfo can be exposed if the /vendor is not protected from public access. This is a rare situation today since the vendor directory is often located...

CVE-2021-37704

PhpFastCache is a high-performance backend cache system packagist package phpfastcache/phpfastcache. In versions before 6.1.5, 7.1.2, and 8.0.7 the phpinfo can be exposed if the /vendor is not protected from public access. This is a rare situation today since the vendor directory is often located...

CVE-2021-37704 Exposed phpinfo() in PhpFastCache

PhpFastCache is a high-performance backend cache system packagist package phpfastcache/phpfastcache. In versions before 6.1.5, 7.1.2, and 8.0.7 the phpinfo can be exposed if the /vendor is not protected from public access. This is a rare situation today since the vendor directory is often located...

CVE-2021-37704

CVE-2021-37704 affects PhpFastCache when the composer/vendor directory is not protected. The issue allows exposure of the phpinfo() page in unprotected /vendor, applicable to PHPFastCache versions prior to 6.1.5, 7.1.2, and 8.0.7. Patched releases are 6.1.5+ (for v6), 7.1.2+ (for v7), and 8.0.7+ ...

PT-2021-21823 · Unknown · Phpfastcache

Name of the Vulnerable Software and Affected Versions: PhpFastCache versions prior to 6.1.5 PhpFastCache versions prior to 7.1.2 PhpFastCache versions prior to 8.0.7 Description: The issue concerns the exposure of phpinfo when the /vendor directory is not protected from public access. This...

phpfastcache 信息泄露漏洞

phpfastcache is a back-end caching system. An information disclosure vulnerability exists in PhpFastCache, which stems from the software's lack of effective access protection for the "vendor" directory, allowing an attacker to access "phpinfo"...

Object Injection

phpsocialnetwork/phpfastcache is vulnerable to object injection. The vulnerability exists as an object can be included through the value of $keyword in Cookie/Driver.php, potentially allowing an attacker to execute arbtirary code...

phpfastcache cookie driver code injection vulnerability

phpfastcache is a back-end caching system. A code injection vulnerability exists in the cookie driver in versions of phpfastcache prior to 5.1.3. The vulnerability stems from a network system or product not properly filtering special elements of externally entered data during the construction of ...

CVE-2019-16774

In phpfastcache before 5.1.3, there is a possible object injection vulnerability in cookie driver...

CVE-2019-16774

In phpfastcache before 5.1.3, there is a possible object injection vulnerability in cookie driver...

Design/Logic Flaw

In phpfastcache before 5.1.3, there is a possible object injection vulnerability in cookie driver...

CVE-2019-16774

Removed by vendor...

CVE-2019-16774 Object injection in cookie driver

In phpfastcache before 5.1.3, there is a possible object injection vulnerability in cookie driver...