CVE-2020-13756-env

CVE-2020-13756 漏洞环境 针对 CVE-2020-13756 的易受攻击测试环境 - Sabberworm PHP CSS 解析器远程代码执行。 漏洞详情 字段| 值 ---|--- CVE| CVE-2020-13756 产品| Sabberworm PHP CSS 解析器 受影响版本| getSelectorsBySpecificity' ' . $GET'n'; // 当 n=100;printf"test"; 时，eval 执行：eval' 100;printf"test";' 参考 NVD 修复提交 完整披露 PacketStorm 免责声明 此环境仅供授权的安全...

[SECURITY] [DLA 4333-1] php-horde-css-parser security update

Debian LTS Advisory DLA-4333-1 [email protected] https://www.debian.org/lts/security/ Andreas Henriksson October 14, 2025 https://wiki.debian.org/LTS Package : php-horde-css-parser Version : 1.0.11-8+deb11u1 CVE ID : CVE-2020-13756 Debian Bug : Sabberworm PHP CSS Parser before 8.3.1 cal...

Debian dla-4333 : php-horde-css-parser - security update

The remote Debian 11 host has a package installed that is affected by a vulnerability as referenced in the dla-4333 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4333-1 [email protected] https://www.debian.org/lts/security/...

DEBIAN-CVE-2020-13756

Sabberworm PHP CSS Parser before 8.3.1 calls eval on uncontrolled data, possibly leading to remote code execution if the function allSelectors or getSelectorsBySpecificity is called with input from an attacker...

PT-2020-13657

Name of the Vulnerable Software and Affected Versions Sabberworm PHP CSS Parser versions prior to 8.3.1 php-horde-css-parser version 1.0.8-1ubuntu1+esm1 and earlier Description The issue is related to the parsing of uncontrolled CSS data, which could lead to remote code execution. The functions...