85 matches found
RockyLinux 9 : php:8.3 (RLSA-2026:57539)
The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:57539 advisory. php: ext-pgsql: PHP: SQL injection via improper backslash escaping CVE-2026-17543 php: PHP: Denial of Service via circular symbolic links in phar archiv...
RHEL 8 : php:8.2 (RHSA-2026:57574)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:57574 advisory. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fixes: php: ext-pgsql: PHP: SQL injection vi...
RockyLinux 10 : php8.4 (RLSA-2026:56969)
The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:56969 advisory. php: ext-pgsql: PHP: SQL injection via improper backslash escaping CVE-2026-17543 php: PHP: Arbitrary code execution via out-of-bounds write in bccomp...
RHEL 9 : php:8.3 (RHSA-2026:57539)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:57539 advisory. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fixes: php: ext-pgsql: PHP: SQL injection vi...
php: ext-pgsql: PHP: SQL injection via improper backslash escaping
A flaw was found in PHP. Improper escaping of backslashes in attacker-provided parameters can lead to a SQL injection vulnerability. A remote attacker could exploit this flaw by crafting malicious input, potentially gaining unauthorized access to sensitive information, manipulating data, or causi...
Important: Red Hat Security Advisory: php8.4 security, bug fix, and enhancement update
An update for php8.4 is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...
ALSA-2026:56969 Important: php8.4 security, bug fix, and enhancement update
PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is...
RHEL 10 : php8.4 (RHSA-2026:56969)
The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:56969 advisory. PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also...
BIT-PHP-MIN-2026-17543 SQL injection in ext-pgsql via E'...' backslash breakout
Improper escaping of backslashes in attacker-provided parameters would allow for trivial SQL injection in PHP versions from 8.2. before 8.2.33, from 8.3. before 8.3.33, from 8.4. before 8.4.24, and from 8.5. before 8.5.9...
BIT-PHP-2026-17543 SQL injection in ext-pgsql via E'...' backslash breakout
Improper escaping of backslashes in attacker-provided parameters would allow for trivial SQL injection in PHP versions from 8.2. before 8.2.33, from 8.3. before 8.3.33, from 8.4. before 8.4.24, and from 8.5. before 8.5.9...
BIT-LIBPHP-2026-17543 SQL injection in ext-pgsql via E'...' backslash breakout
Improper escaping of backslashes in attacker-provided parameters would allow for trivial SQL injection in PHP versions from 8.2. before 8.2.33, from 8.3. before 8.3.33, from 8.4. before 8.4.24, and from 8.5. before 8.5.9...
CLSA-2026-1786448352 php: Fix of 3 CVEs
CVE-2026-7260: fix stack exhaustion on circular symlinks in tar-based phar archives; also backport upstream bug 69720 NULL pointer dereference in phargetfpoffset, without which the fix only relocates the crash - CVE-2026-17543: fix SQL injection in ext/pgsql via backslash breakout from E'...'...
CLSA-2026-1785755669 php: Fix of 3 CVEs
CVE-2026-17543: fix SQL injection in ext/pgsql via E'...' backslash breakout in phppgsqladdquotes GHSA-7qpv-r5mr-78m4 - CVE-2026-7260: fix stack exhaustion from circular symlinks in phar archives by replacing recursion in phargetlinksource with cycle detection GHSA-vc5h-9ppw-p5f3...
CLSA-2026-1786603529 Fix CVE(s): CVE-2026-17543, CVE-2026-7260
SECURITY UPDATE: unbounded recursion via circular symlinks in phar archives - debian/patches/CVE-2026-7260.patch: unbounded recursion via circular symlinks in phar archives - CVE-2026-7260 SECURITY UPDATE: SQL injection in ext/pgsql via E'...' backslash breakout -...
SUSE SLES15: apache2-mod_php8 / php8 / php8-bcmath / php8-bz2 / php8-calendar / etc (SUSE-SU-2026:3514-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3514-1 advisory. Update to version 8.2.33. Security issues fixed: - CVE-2026-7260: circular symbolic links in phar archives can lead to unbounded...
Exploit for SQL Injection in Php
CVE-2026-17543 — SQL Injection in PHP ext/pgsql via E'...'...
SUSE-SU-2026:3513-1 Security update for php8
This update for php8 fixes the following issues: - CVE-2026-7260: circular symbolic links in phar archives can lead to unbounded recursion and cause C stack exhaustion bsc1273077. - CVE-2026-9672: security issues in libgd bsc1273078. - CVE-2026-17543: improper escaping of backslashes in...
CLSA-2026-1785936981 php: Fix of 2 CVEs
CVE-2026-17543: fix SQL injection in ext-pgsql via E'...' backslash breakout GHSA-7qpv-r5mr-78m4 - CVE-2026-7260: fix unbounded recursion on circular phar symlinks GHSA-vc5h-9ppw-p5f3...
CLSA-2026-1785500956 Fix CVE(s): CVE-2026-17543
SECURITY UPDATE: fix stack exhaustion via circular symlinks in tar-based phar archives GHSA-vc5h-9ppw-p5f3 - debian/patches/CVE-2026-7260.patch: fix stack exhaustion via circular symlinks in tar-based phar archives GHSA-vc5h-9ppw-p5f3 - CVE-2026-7260 SECURITY UPDATE: fix SQL injection in ext-pgsq...