865 matches found
CVE-2007-4596
The perl extension in PHP does not follow safemode restrictions, which allows context-dependent attackers to execute arbitrary code via the Perl eval function. NOTE: this might only be a vulnerability in limited environments...
CVE-2007-4528
The Foreign Function Interface ffi extension in PHP 5.0.5 does not follow safemode restrictions, which allows context-dependent attackers to execute arbitrary code by loading an arbitrary DLL and calling a function, as demonstrated by kernel32.dll and the WinExec function. NOTE: this issue does n...
PHP Perl Extension Safe_mode Bypass Exploit
Exploit for unknown platform in category local exploits =========================================== PHP Perl Extension Safemode Bypass Exploit =========================================== "; $perl-eval"system'".$GET'cmd'."'"; echo ""; $GET'cmd'=htmlspecialchars$GET'cmd'; echo "CMD: " ? 0day.today...
PHP Perl Extension - Safe_mode Bypass
PHP Perl Extension - Safemode Bypass "; $perl-eval"system'".$GET'cmd'."'"; echo "/textarea"; $GET'cmd'=htmlspecialchars$GET'cmd'; echo "CMD: " ? milw0rm.com 2007-08-25...
PHP Perl Extension Safe_mode BypassExploit
No description provided by source. ?php ---------------------------------------------------- ----PHP Perl Extension Safemode Bypass Exploit----- ---------------------------------------------------- -Author:--NetJackal--------------------------------- -Email:---nima501atyahoodotcom----------------...
PHP FFI Extension 5.0.5 Local Safe_mode Bypass Exploit
Exploit for unknown platform in category local exploits ====================================================== PHP FFI Extension 5.0.5 Local Safemode Bypass Exploit ====================================================== ?php ---------------------------------------------------- -----PHP FFI...
PHP 'FFI' Extension 5.0.5 - 'Safe_mode' Local Bypass
WinExec"cmd.exe /c $command "$...
PHP FFI Extension 5.0.5 - Safe_mode Local Bypass
PHP FFI Extension 5.0.5 - Safemode Local Bypass ?php ---------------------------------------------------- -----PHP FFI Extension Safemode Bypass Exploit----- ---------------------------------------------------- -Tested on 5.0.5------------------------------------...
PHP Win32Service扩展Safe_Mode限制绕过漏洞
PHP是一款广泛使用的WEB开发脚本语言。 PHP Win32Service扩展存在'safemode'限制绕过问题，远程攻击者可以利用漏洞绕过安全限制，执行受限PHP代码。 在共享主机的配置下，多个用户可以建立和执行任意PHP脚本代码受此漏洞影响。攻击者可以构建恶意WEB页，绕过'safemode'的用户隔离限制，以WEB权限执行受限代码。 PHP PHP 5.2.1 + Ubuntu Ubuntu Linux 7.04 sparc + Ubuntu Ubuntu Linux 7.04 powerpc + Ubuntu Ubuntu Linux 7.04 i386 + Ubuntu...
CVE-2007-4147
Interspire ArticleLive NX prior to 1.7.1.2 is affected by multiple unspecified vulnerabilities with unknown impact and attack vectors. The connected sources mention potential issues related to AL_SANITIZE and a constructor-related check mechanism, but no concrete exploit details, affected file/en...
PHP 5.x (win32service) Local Safe Mode Bypass Exploit
No description provided by source. ?php PHP Safemode bypass exploit win32service Note: Tested on 5.2.1 Author: NetJackal Email: nima501atyahoodotcom Website: http://netjackal.by.ru ...
PHP 5.x (win32service) Local Safe Mode Bypass Exploit
Exploit for unknown platform in category local exploits ===================================================== PHP 5.x win32service Local Safe Mode Bypass Exploit ===================================================== $n,'display'=$n,'path'=$cmd,'params'="/c $command "$name""; win32startservice$n;...
PHP win32service extension protection bypass
Service management functions ara available from safe mode...
PHP 5.2.3 Win32std - win_shell_execute Safe Mode disable_functions Bypass
PHP 5.2.3 Win32std - winshellexecute Safe Mode disablefunctions Bypass milw0rm.com 2007-07-24...
PHP 5.2.3 Win32std - win_shell_execute Safe Mode Disable Functions Bypass
PHP 5.2.3 Win32std - winshellexecute Safe Mode Disable Functions Bypass milw0rm.com 2007-07-24...
PHP 5.2.3 Win32std - 'win_shell_execute' Safe Mode / disable_functions Bypass
milw0rm.com 2007-07-24...
MPack with virtual hosting and PHP security-vulnerability warning-the black bar safety net
MPack is by a self-proclaimed "Dream Coders Team" of the organization development of the PHP program, which contain a number of the latest exploit code can be used to manipulate the distal end of attacks on Panda Labs at the end of last year when for the first time found that, at the time someone...
CVE-2007-3378
The 1 sessionsavepath, 2 iniset, and 3 errorlog functions in PHP 4.4.7 and earlier, and PHP 5 5.2.3 and earlier, when invoked from a .htaccess file, allow remote attackers to bypass safemode and openbasedir restrictions and possibly execute arbitrary commands, as demonstrated using a phpvalue, b...
PHP < 5.2.1 Multiple Vulnerabilities
According to its banner, the version of PHP installed on the remote host is older than 5.2.1. Such versions may be affected by several issues, including buffer overflows, format string vulnerabilities, arbitrary code execution, 'safemode' and 'openbasedir' bypasses, and clobbering of super-global...
readfile() Safe Mode Bypass PHP 5.2.1/ 5.1.6 / 4.4.4
SecurityRisk : DEN Remote Exploit : No Local Exploit : Yes Exploit Given : Yes Credit : The-WolF-kSA Date : 24.3.2007 Affected Software : PHP 5.2.1/ 5.1.6 / 4.4.4 readfile Safe Mode Bypass PHP 5.2.1/ 5.1.6 / 4.4.4 Author: ThE-WoLf-KsA Date: - -Written: 24.3.2007 - --- 0.Description --- - --- 1...