PHP < 5.3.1 Multiple Vulnerabilities

PHP is prone to multiple vulnerabilities. Copyright C 2012 NopSec Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or...

Mandriva Linux Security Advisory : php (MDVSA-2009:302)

Some vulnerabilities were discovered and corrected in php-5.3.1 : - Added maxfileuploads INI directive, which can be set to limit the number of file uploads per-request to 20 by default, to prevent possible DOS via temporary file exhaustion. Ilia - Added missing sanity checks around exif...

CVE-2009-3559

CVE-2009-3559 corresponds to a PHP 5.3.x issue where PHP 5.3.x before 5.3.1 does not recognize the safe_mode_include_dir directive. According to SUSE and Mandriva advisories, this affects PHP 5.3.0–5.3.0.x prior to 5.3.1 and is linked to a safe_mode_include_dir bypass/bypass-like condition causin...