[SECURITY] Fedora 11 Update: php-ZendFramework-1.10.4-1.fc11

Extending the art & spirit of PHP, Zend Framework is based on simplicity, object-oriented best practices, corporate friendly licensing, and a rigorou sly tested agile codebase. Zend Framework is focused on building more secure, reliable, and modern Web 2.0 applications & web services, and consumi...

CVE-2010-1914

The Zend Engine in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context-dependent attackers to obtain sensitive information by interrupting the handler for the 1 ZENDBWXOR opcode shiftleftfunction, 2 ZENDSL opcode bitwisexorfunction, or 3 ZENDSR opcode shiftrightfunction, related to the...

Code injection

The Zend Engine in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context-dependent attackers to obtain sensitive information by interrupting the handler for the 1 ZENDBWXOR opcode shiftleftfunction, 2 ZENDSL opcode bitwisexorfunction, or 3 ZENDSR opcode shiftrightfunction, related to the...

CVE-2010-1914

The Zend Engine in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context-dependent attackers to obtain sensitive information by interrupting the handler for the 1 ZENDBWXOR opcode shiftleftfunction, 2 ZENDSL opcode bitwisexorfunction, or 3 ZENDSR opcode shiftrightfunction, related to the...

CVE-2010-1914

CVE-2010-1914 affects PHP’s Zend Engine: PHP 5.2 (up to 5.2.13) and 5.3 (up to 5.3.2) are impacted. The vulnerability arises from interruptions of the XEND opcode parser for ZEND_BW_XOR, ZEND_SL, and ZEND_SR (in relation to convert_to_long_base), which can allow a context-dependent attacker to ob...

CVE-2010-1914: Exposure of Sensitive Information to an Unauthorized Actor

The Zend Engine in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context-dependent attackers to obtain sensitive information by interrupting the handler for the 1 ZENDBWXOR opcode shiftleftfunction, 2 ZENDSL opcode bitwisexorfunction, or 3 ZENDSR opcode shiftrightfunction, related to the...

CVE-2010-1914

The Zend Engine in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context-dependent attackers to obtain sensitive information by interrupting the handler for the 1 ZENDBWXOR opcode shiftleftfunction, 2 ZENDSL opcode bitwisexorfunction, or 3 ZENDSR opcode shiftrightfunction, related to the...

CVE-2010-1914

The Zend Engine in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context-dependent attackers to obtain sensitive information by interrupting the handler for the 1 ZENDBWXOR opcode shiftleftfunction, 2 ZENDSL opcode bitwisexorfunction, or 3 ZENDSR opcode shiftrightfunction, related to the...

MOPS-2010-014: PHP ZEND_BW_XOR Opcode Interruption Address Information Leak Vulnerability

MOPS-2010-014: PHP ZENDBWXOR Opcode Interruption Address Information Leak Vulnerability May 8th, 2010 PHP’s ZENDBWXOR opcode can be abused for address information leak attacks by an userspace error handler interruption attack. Affected versions Affected is PHP 5.2 = 5.2.13 Affected is PHP 5.3 =...

MOPS-2010-009: PHP shm_put_var() Already Freed Resource Access Vulnerability

MOPS-2010-009: PHP shmputvar Already Freed Resource Access Vulnerability May 5th, 2010 When PHP’s shmputvar function is interrupted by an object’s sleep function it can destroy the shm resource used by this function which allows to write an arbitrary memory address. Affected versions Affected is...

Month of PHP Security - Summary - 1st May - 10th May

Hi everyone, 10 days ago the Month of PHP Security 2010 has started at http://www.php-security.org/ and meanwhile 20 vulnerabilities were posted and also 4 user submitted articles were published. Here is a short summary of what was released so far. You can follow the Month of PHP Security on...

MOPS-2010-015: PHP ZEND_SL Opcode Interruption Address Information Leak Vulnerability

MOPS-2010-015: PHP ZENDSL Opcode Interruption Address Information Leak Vulnerability May 8th, 2010 PHP’s ZENDSL opcode can be abused for address information leak attacks by an userspace error handler interruption attack. Affected versions Affected is PHP 5.2 = 5.2.13 Affected is PHP 5.3 = 5.3.2...

FreeBSD : Zend Framework -- security issues in bundled Dojo library (8ad1c404-3e78-11df-a5a1-0050568452ac)

The Zend Framework team reports : Several files in the bundled Dojo library were identified as having potential exploits, and the Dojo team also advised disabling or removing any PHP scripts in the Dojo library tree when deploying to production. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Zend Framework -- security issues in bundled Dojo library

The Zend Framework team reports: Several files in the bundled Dojo library were identified as having potential exploits, and the Dojo team also advised disabling or removing any PHP scripts in the Dojo library tree when deploying to production...

Fedora Update for php-ZendFramework FEDORA-2010-0652

Check for the Version of php-ZendFramework OpenVAS Vulnerability Test Fedora Update for php-ZendFramework FEDORA-2010-0652 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

CityShop v5. 5. 8 sql injection 0day&background get the webshell method-vulnerability warning-the black bar safety net

Text/My5t3ry Saw yesterday on the Forum a friend asked CitySHOP background how to get a SHELL, just under the source code back to read the next, find the code with the zend encryption. The decryption after the reading, the vulnerability also really many, many parameters are$GET straight into the...

[SECURITY] Fedora 12 Update: php-ZendFramework-1.9.7-1.fc12

Extending the art & spirit of PHP, Zend Framework is based on simplicity, object-oriented best practices, corporate friendly licensing, and a rigorou sly tested agile codebase. Zend Framework is focused on building more secure, reliable, and modern Web 2.0 applications & web services, and consumi...

[SECURITY] Fedora 11 Update: php-ZendFramework-1.9.7-1.fc11

Extending the art & spirit of PHP, Zend Framework is based on simplicity, object-oriented best practices, corporate friendly licensing, and a rigorou sly tested agile codebase. Zend Framework is focused on building more secure, reliable, and modern Web 2.0 applications & web services, and consumi...

Zend Framework 1.9.6 - Multiple Input Validation Vulnerabilities Security Bypass

Zend Framework 1.9.6 - Multiple Input Validation Vulnerabilities Security Bypass source: https://www.securityfocus.com/bid/37809/info Zend Framework is prone to multiple input-validation vulnerabilities and a weakness: - Multiple cross-site scripting issues - An HTML-injection issue - A...

FreeBSD : Zend Framework -- multiple vulnerabilities (c9263916-006f-11df-94cb-0050568452ac)

The Zend Framework team reports : Potential XSS or HTML Injection vector in ZendJson. Potential XSS vector in ZendServiceReCaptchaMailHide. Potential MIME-type Injection in ZendFileTransfer Executive Summary. Potential XSS vector in ZendFilterStripTags when comments allowed. Potential XSS vector ...