1594 matches found
SUSE SLES11 Security Update : php53 (SUSE-SU-2015:1018-1)
PHP 5.3 was updated to fix multiple security issues : bnc931776: pcntlexec does not check path validity CVE-2015-4026 bnc931772: overflow in ftpgenlist resulting in heap overflow CVE-2015-4022 bnc931769: memory corruption in pharparsetarfile when entry filename starts with NULL CVE-2015-4021...
Design/Logic Flaw
Algorithmic complexity vulnerability in the multipartbufferheaders function in main/rfc1867.c in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 allows remote attackers to cause a denial of service CPU consumption via crafted form data that triggers an improper order-of-growth...
CVE-2015-4024
Algorithmic complexity vulnerability in the multipartbufferheaders function in main/rfc1867.c in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 allows remote attackers to cause a denial of service CPU consumption via crafted form data that triggers an improper order-of-growth...
PHP remote DoS vulnerability in-depth analysis and protection solution-vulnerability warning-the black bar safety net
5 month 1 4 day, domestic broke the php remote DoS vulnerability, the official number 6 9 3 6 4 in. Use the vulnerability to construct the poc to initiate a link, it is easy to cause the target host cpu utilization 1 0 0%, to PHP more version. Nsfocus Threat Response Center immediately launched t...
PHP aeration DOS vulnerability may cause the CPU to fill involving multiple PHP versions-vulnerability warning-the black bar safety net
Recently, PHP is broke there is a remote DOS vulnerability, if the hackers use the vulnerability to construct the PoC to initiate a connection, easily lead to the target host CPU is rapidly consumed. This vulnerability relates to many PHP versions, and thus affect the range greatly. Vulnerability...
Ubuntu install php5. 6. 9 immune Multipart/form-data remote denial of service vulnerability-vulnerability warning-the black bar safety net
Recently Baidu classmates liushushengatbaidu. com to php feedback a Multipart/form-data remote denial of service vulnerabilities. An attacker can construct and continue to send the malformation of the HTTP request, a malicious system resources. Simple test, multi-threaded continuous contract, you...
PHP multipart/form-data 拒绝服务漏洞
No description provided by source...
PHP multipart/form-data remote DOS vulnerability-vulnerability warning-the black bar safety net
PHP parse multipart/form-datahttp request the body part of the request header, the duplicate copy of the string resulting in DOS. A remote attacker by sending a maliciously constructed multipart/form-data requests, causing the server CPU resource is exhausted, so a remote DOS Server. Affect range...
齐博地方门户系统sql注入
简要描述： 变量未初始化导致注入 详细说明： 齐博地方门户系统 齐博的全局过滤系统中由于存在如下代码，导致传入的参数可以成为全局变量 foreach$COOKIE AS $key=$value unset$$key; foreach$POST AS $key=$value !ereg"^\A-Z+",$key && $$key=$POST$key; foreach$GET AS $key=$value !ereg"^\A-Z+",$key && $$key=$GET$key; 所以系统中如果存在未初始化的变量，容易导致注入 2shou/post.php中 180行...
PHPB2B注入(绕过过滤)
简要描述： PHPB2B某处注入。绕过过滤。 详细说明： 官方最新版本. https://github.com/ulinke/phpb2b/archive/master.zip 漏洞文件。virtual-office/offer.php POST /virtual-office/offer.php Content-Disposition: form-data; name="datatradetypeid Content-Disposition: form-data; name="datatradeadwords Content-Disposition: form-data;...
Cisco Intelligent Automation for Cloud Form Data Viewer Utility Vulnerability
A vulnerability in the Form Data Viewer utility of Cisco Intelligent Automation for Cloud could allow an authenticated, remote attacker to view passwords of provisioned systems. The vulnerability is due to the inclusion of passwords in the form data. An attacker could exploit this vulnerability b...
CVE-2014-3298
Form Data Viewer in Cisco Intelligent Automation for Cloud in Cisco Cloud Portal places passwords in form data, which allows remote authenticated users to obtain sensitive information by reading HTML source code, aka Bug ID CSCui36976...
Information disclosure
Form Data Viewer in Cisco Intelligent Automation for Cloud in Cisco Cloud Portal places passwords in form data, which allows remote authenticated users to obtain sensitive information by reading HTML source code, aka Bug ID CSCui36976...
CVE-2014-3298
The CVE-2014-3298 issue affects Cisco Intelligent Automation for Cloud, specifically the Cloud Portal’s Form Data Viewer Utility. The root cause is that passwords are placed in form data and can be read from the HTML source of the vulnerable page, enabling an authenticated, remote attacker to obt...
CVE-2014-3088
stconf.nsf in IBM Sametime Meeting Server 8.5.1 relies on the client to validate the file format used in wAttach?OpenForm multipart/form-data POST requests, which allows remote authenticated users to bypass intended upload restrictions by modifying the Content-Type header and file extension, as...
Wordpress Zingiri Web Shop Plugin <= 2.4.2 Persistent XSS
No description provided by source. Wordpress Zingiri Web Shop Plugin = 2.4.2 Stored XSS Exploit Title: Wordpress Zingiri Web Shop Plugin = 2.4.0 Stored XSS Google Dork: Date: 30 Apr 2012 Author: Mehmet Ince Twitter: https://twitter.com/!/mmetince Company: Bilgi Guvenligi Akademisi www.bga.com.tr...
DCShop Beta 1.0 Form Manipulation Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/4356/info DCShop Beta is a freely available shopping cart system, written in Perl. It will run on most Unix and Linux variants, as well as Microsoft Windows operating systems. It is possible to overwrite setup files .setu...
SpamBam WordPress Plugin Key Calculation Security Bypass Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/27291/info SpamBam is prone to a security-bypass vulnerability because client-accessible data can be used to calculate verification keys. Attackers can exploit this issue to submit arbitrary form data via automated script...
LinPHA Photo Gallery 2.0 - Remote Command Execution Exploit
No description provided by source. !/usr/bin/perl ----------------------------------------------------------------------------------------------------------------------- INFORMATIONS...
e107 <= 0.75 - (GLOBALS Overwrite) Remote Code Execution Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? printr' -------------------------------------------------------------------------------- e107 = 0.75 GLOBALS overwrite/ZendHashDelKeyOrIndex remote commands execution exploit by rgod [email protected] site:...