PHP HTMLEntities和HTMLSpecialChars函数缓冲区溢出漏洞

PHP是广泛使用的通用目的脚本语言，特别适合于Web开发，可嵌入到HTML中。 PHP在处理HTML实体时存在漏洞，远程攻击者可能利用此漏洞在PHP服务器上执行任意指令。 PHP的HTML实体编码器在每次到达当前缓冲区末尾的时候都会增加其输出缓冲区的大小，但这种检查假设HTML实体的最大长度为8个字符。尽管这种假设在大多数情况下都是正确的，但希腊字符集就可能包含有大于8个字符的实体，因此攻击者就可以通过在输入字符串中包含希腊theta UTF-8字符来触发缓冲区溢出。...

PHP functions buffer overflow

Buffer overflow in htmlentities and htmlspecialchars on UTF-8 encoding...

punBB1211.txt

PunBB 1.2.11 Cross-Site Scripting File name :- misc.php Action :- Send Email Line :- 123 php redirect$POST'redirecturl', $langmisc'E-mail sent redirect'; /php The $POST'redirecturl' = Unfilter Input Exploit :- Send POST Request code GET :- /PunBB/misc.php?email=2 POST :-...

PunBB 1.2.11 Cross-Site Scripting

PunBB 1.2.11 Cross-Site Scripting File name :- misc.php Action :- Send Email Line :- 123 php redirect$POST'redirecturl', $langmisc'E-mail sent redirect'; /php The $POST'redirecturl' = Unfilter Input Exploit :- Send POST Request code GET :- /PunBB/misc.php?email=2 POST :-...

MyBB 1.10 New CrossSiteScripting ' member.php '

//-- MyBB 1.10 New CrossSiteScripting ' member.php ' --// Webattack :- /mybb/member.php?action=dologin&username=usrname&password=pass&url="scriptalert1;/script //-- FixIT --// Open member.php GoTo Line :- 1030 .. if$mybb-input'url' redirect$mybb-input'url', $lang-redirectloggedin; Replace It With...

WoltLab Burning Board <= 2.3.1 PL2 - XSS Vulnerability (24.04.05)

WoltLab Burning Board = 2.3.1 PL2 - XSS Vulnerability Vendor: WoltLab URL: http://www.woltlab.de/ Version: = 2.3.1 PL 2 Type: XSS Discovered by R and deluxe89 Description: -------------------------------- The WoltLab Burning Board is a high customisable forum software for every kind of use. See 1...