CentOS 8 : php:8.0 (CESA-2023:0848)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2023:0848 advisory. - In PHP versions before 7.4.31, 8.0.24 and 8.1.11, the phar uncompressor code would recursively uncompress quines gzip files, resulting in an infinite...

ALSA-2023:0848 Moderate: php:8.0 security update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The following packages have been upgraded to a later upstream version: php 8.0. BZ2161666 Security Fixes: XKCP: buffer overflow in the SHA-3 reference implementation CVE-2022-37454 php: standard insecure cookie...

Fedora 36 : php (2023-2dc2d607ba)

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-2dc2d607ba advisory. PHP version 8.1.14 05 Jan 2023 Core: Fixed bug GH-9905 constant behaves inconsistent when class is undefined. cmb Fixed bug GH-9918 License...

SQL Injection

php is vulnerable to SQL Injection attacks. The vulnerability exists due to an integer overflow when processing untrusted input within the PDO::quote in PDOSQLite, which allows a remote attacker to pass a specially crafted input to the application that after being processed by the affected...

[slackware-security] php

New php packages are available for Slackware 15.0 and -current to fix a security issue. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/php-7.4.33-i586-2slack15.0.txz: Rebuilt. This update fixes a security issue: PDO::quote may return unquoted string. For more information...

PT-2022-7564 · Unknown +12 · Pdo Sqlite +12

Name of the Vulnerable Software and Affected Versions: PHP versions 8.0. through 8.0.26 PHP versions 8.1. through 8.1.14 PHP versions 8.2. through 8.2.1 Description: The issue occurs due to an uncaught integer overflow in the PDO::quote function of PDO SQLite, which can return an improperly quote...