47 matches found
PHP 4.0.x,5.0.0 disable_functions特征安全绕过漏洞
No description provided by source...
Directory traversal
Directory traversal vulnerability in autoinstall4imagesgalleryupgrade.php in the Fantastico De Luxe Module for cPanel allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the scriptpathshow parameter in a GoAhead action. NOTE: this issue only...
Design/Logic Flaw
The Component Object Model COM functions in PHP 5.x on Windows do not follow safemode and disablefunctions restrictions, which allows context-dependent attackers to bypass intended limitations, as demonstrated by executing objects with the kill bit set in the corresponding ActiveX control...
CVE-2007-5653
The CVE-2007-5653 entry concerns PHP 5.x on Windows where COM functions do not honor safe_mode or disable_functions, enabling context-dependent bypass of intended restrictions. The description cites concrete examples related to com_load_typelib and interactions with ActiveX/Windows components suc...
PHP 5.x COM - Safe Mode / disable_functions Bypass
sounds good //The windows version of PHP has built in support for this extension. You do not need to //load any additional extension in order to use these functions. //You are responsible for installing support for the various COM objects that you intend //to use such as MS Word; we don't and can...
PHP 5.x COM - Safe Mode disable_functions Bypass
PHP 5.x COM - Safe Mode disablefunctions Bypass sounds good //The windows version of PHP has built in support for this extension. You do not need to //load any additional extension in order to use these functions. //You are responsible for installing support for the various COM objects that you...
CVE-2007-5447
ioncubeloaderwin5.2.dll in the ionCube Loader 6.5 extension for PHP 5.2.4 does not follow safemode and disablefunctions restrictions, which allows context-dependent attackers to bypass intended limitations, as demonstrated by reading arbitrary files via the ioncubereadfile function...
CVE-2007-5447
ioncubeloaderwin5.2.dll in the ionCube Loader 6.5 extension for PHP 5.2.4 does not follow safemode and disablefunctions restrictions, which allows context-dependent attackers to bypass intended limitations, as demonstrated by reading arbitrary files via the ioncubereadfile function...
CVE-2007-5447: Undefined Security Weakness
ioncubeloaderwin5.2.dll in the ionCube Loader 6.5 extension for PHP 5.2.4 does not follow safemode and disablefunctions restrictions, which allows context-dependent attackers to bypass intended limitations, as demonstrated by reading arbitrary files via the ioncubereadfile function...
CVE-2007-5424
The disablefunctions feature in PHP 4 and 5 allows attackers to bypass intended restrictions by using an alias, as demonstrated by using inialter when iniset is disabled...
CVE-2007-5424
The disablefunctions feature in PHP 4 and 5 allows attackers to bypass intended restrictions by using an alias, as demonstrated by using inialter when iniset is disabled...
CVE-2007-5424
The disablefunctions feature in PHP 4 and 5 allows attackers to bypass intended restrictions by using an alias, as demonstrated by using inialter when iniset is disabled...
CVE-2007-5424
The CVE-2007-5424 entry concerns PHP 4/5 where the disable_functions setting can be bypassed via an alias (demonstrated via ini_alter when ini_set is disabled). Affected component: PHP’s configuration and function-disabling mechanism. Reported impact aligns with PARTIAL confidentiality/integrity/...
CVE-2007-5424: Undefined Security Weakness
The disablefunctions feature in PHP 4 and 5 allows attackers to bypass intended restrictions by using an alias, as demonstrated by using inialter when iniset is disabled...
PHP 5.2.4 ionCube extension safe_mode / disable_functions Bypass
Exploit for unknown platform in category local exploits ================================================================ PHP 5.2.4 ionCube extension safemode / disablefunctions Bypass ================================================================ ionCub...
Verlihub Control Panel <= 1.7.x Local File Inclusion Vulnerability
Exploit for unknown platform in category web applications ================================================================== Verlihub Control Panel dchub.nemesis.te-home.net:4120 Bug: Line: 27 - iniset"magicquotesgpc","1"; ............................ Line: 71 - $pagename = isset$GET'page' ?...
PHP-alias vulnerable: disable_functions bypass
PHP-alias vulnerable: disablefunctions bypass ================================== Источник: PHP-alias vulnerable: disablefunctions bypass Автор: ElektAntichat.ru Обнаружено: 12.09.2007 Тип: локальная Описание: При запрете основной функции/её псевдонима в disablefunctions eё псевдоним/основная...
