UBUNTU-CVE-2016-10397

In PHP before 5.6.28 and 7.x before 7.0.13, incorrect handling of various URI components in the URL parser could be used by attackers to bypass hostname-specific URL checks, as demonstrated by evil.example.com:[email protected]/ and evil.example.com:[email protected]/ inputs to the parseurl...

PT-2017-17805

Name of the Vulnerable Software and Affected Versions vBulletin versions prior to 5.3.0 Description The issue allows remote attackers to bypass a previous patch and conduct Server-Side Request Forgery SSRF attacks. This is possible due to the behavior of the PHP parse url function. Recommendation...