CVE-2026-39850: Improper Input Validation

Yii 2 is a PHP application framework. Versions 2.0.54 and prior contain flawed logic in the core view rendering method View::renderPhpFile that leads to Local File Inclusion. The function calls extract$params, EXTROVERWRITE before the require statement that loads the view file. As a result, a...

PHP <5.2.15 EXTR_OVERWRITE 安全模式绕过漏洞

No description provided by source...

CVE-2011-0752: Improper Input Validation

The extract function in PHP before 5.2.15 does not prevent use of the EXTROVERWRITE parameter to overwrite 1 the GLOBALS superglobal array and 2 the this variable, which allows context-dependent attackers to bypass intended access restrictions by modifying data structures that were not intended t...

PT-2011-2608

The extract function in PHP before 5.2.15 does not prevent use of the EXTR OVERWRITE parameter to overwrite 1 the GLOBALS superglobal array and 2 the this variable, which allows context-dependent attackers to bypass intended access restrictions by modifying data structures that were not intended ...

PHP 5.2.x < 5.2.15 Multiple Vulnerabilities

Binary data 5733.prm...

CVE-2005-2691: Undefined Security Weakness

includes/common.php in RunCMS 1.2 and earlier calls the extract function with EXTROVERWRITE on HTTP POST variables, which allows remote attackers to overwrite arbitrary variables, possibly allowing execution of arbitrary code...