6 matches found
PT-2020-22329
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow read error. Technical details include the crash type being a Heap-buffer-overflow READ 14, and the crash sta...
PT-2019-6736
Name of the Vulnerable Software and Affected Versions LDAP Account Manager LAM Pro version 3.6 Description A Cross-Site Scripting XSS issue exists in the export, add value form, and dn parameters to "cmd.php" API endpoint. This allows for potential malicious script execution. Recommendations For...
php: Heap buffer overflow in function exif_iif_add_value()
When processing certain files, PHP EXIF extension in versions 7.1.x below 7.1.28, 7.2.x below 7.2.17 and 7.3.x below 7.3.4 can be caused to read past allocated buffer in exifiifaddvalue function. This may lead to information disclosure or crash...
PT-2019-4832
Name of the Vulnerable Software and Affected Versions PHP versions 7.1.x through 7.1.29 PHP versions 7.2.x through 7.2.18 PHP versions 7.3.x through 7.3.5 Description The issue is related to an out-of-bounds buffer read in the PHP interpreter, specifically affecting the exif iif add value functio...
PT-2019-4958
Name of the Vulnerable Software and Affected Versions PHP EXIF extension versions 7.1.x below 7.1.28 PHP EXIF extension versions 7.2.x below 7.2.17 PHP EXIF extension versions 7.3.x below 7.3.4 Description The issue is related to the PHP EXIF extension, specifically the exif iif add value functio...
PT-2014-4377
Name of the Vulnerable Software and Affected Versions OpenDocMan versions prior to 1.2.7.2 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the add value parameter in the "ajax udf.php" file. Recommendations For versions prior to 1.2.7.2, updat...