53 matches found
php53 security, bug fix and enhancement update
5.3.3-21 - add security fix for CVE-2013-4248 5.3.3-20 - add security fix for CVE-2013-4113 5.3.3-19 - add upstream reproducer for errorhandler 951075 5.3.3-18 - add security fixes for CVE-2006-7243 5.3.3-17 - reorder security patches - add security fixes for CVE-2012-2688, CVE-2012-0831,...
Fedora 17 : php-5.4.17-2.fc17 (2013-12354)
04 Jul 2013, PHP 5.4.17 Core : - Fixed bug 64988 Class loading order affects ESTRICT warning. Laruence - Fixed bug 64966 segfault in zenddofcallcommonhelperSPEC. Laruence - Fixed bug 64960 Segfault in gczvalpossibleroot. Laruence - Fixed bug 64936 doc comments picked up from previous scanner run...
Fedora 18 : php-5.4.17-2.fc18 (2013-12315)
04 Jul 2013, PHP 5.4.17 Core : - Fixed bug 64988 Class loading order affects ESTRICT warning. Laruence - Fixed bug 64966 segfault in zenddofcallcommonhelperSPEC. Laruence - Fixed bug 64960 Segfault in gczvalpossibleroot. Laruence - Fixed bug 64936 doc comments picked up from previous scanner run...
php security, bug fix and enhancement update
5.3.3-22 - php-xml provides php-xmlreader and php-xmlwriter 874987 - fix possible NULL derefence and buffer overflow 879179 - fix zend garbage collector 848186, 868375 5.3.3-21 - fix CVE reference in previous changelog entry 5.3.3-20 - remove reproducer from security fix for CVE-2012-0781 5.3.3-1...
PHP PDORow Object - Remote Denial of Service
source: https://www.securityfocus.com/bid/51952/info PHP is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to cause the web server to crash, denying service to legitimate users. PHP 5.3.8 is vulnerable; other versions may also be affected. fetchPDO::FETCHLAZ...
Fedora 14 : php-ZendFramework-1.11.6-1.fc14 (2011-7409)
Fixes ZF2011-02: Potential SQL Injection Vector When Using PDOMySql Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...
Zend Framework "PDO_MySql"安全限制绕过漏洞
BUGTRAQ ID: 47919 Zend Framework ZF 是一个开放源代码的 PHP5 开发框架，可用于来开发 web 程序和服务。 Zend Framework在实现上存在"PDOMySql"安全限制绕过漏洞，远程攻击者可利用此漏洞绕过某些安全限制，利用SQL注入漏洞。 Zend Zend Framework 1.11.4 Zend Zend Framework 1.11.3 Zend Zend Framework 1.10.4 Zend Zend Framework 1.10.3 Zend Zend Framework 1.10.2 厂商补丁： Zend ----...
Fedora 15 : php-ZendFramework-1.11.6-1.fc15 (2011-7426)
Fixes ZF2011-02: Potential SQL Injection Vector When Using PDOMySql Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...
Zend Framework 'PDO_MySql' SQL注入漏洞
Bugtraq ID: 47919 Zend Framework是一款开放源代码的PHP5开发框架实现。 开放人员使用非ASCCI兼容编码与MySQL PDO驱动一起使用，可能容易受SQL注入的攻击。攻击者可以利用此漏洞绕过过滤机制进行SQL注入，可获得敏感信息或操作数据库。 Zend Zend Framework 1.11.4 Zend Zend Framework 1.11.3 Zend Zend Framework 1.10.4 Zend Zend Framework 1.10.3 Zend Zend Framework 1.10.2 厂商解决方案 Zend Framework...
Zend Framework 1.11.4 - PDO_MySql Security Bypass
Zend Framework 1.11.4 - PDOMySql Security Bypass source: https://www.securityfocus.com/bid/47919/info Zend Framework is prone to a security-bypass vulnerability. An attacker can leverage this vulnerability to bypass certain security restrictions. Successful exploits may allow attackers to exploit...
FreeBSD : Zend Framework -- potential SQL injection when using PDO_MySql (34e8ccf5-7d71-11e0-9d83-000c29cc39d3)
The Zend Framework team reports : Developers using non-ASCII-compatible encodings in conjunction with the MySQL PDO driver of PHP may be vulnerable to SQL injection attacks. Developers using ASCII-compatible encodings like UTF8 or latin1 are not affected by this PHP issue. %NASLMINLEVEL 70300 C...
Zend Framework -- potential SQL injection when using PDO_MySql
The Zend Framework team reports: Developers using non-ASCII-compatible encodings in conjunction with the MySQL PDO driver of PHP may be vulnerable to SQL injection attacks. Developers using ASCII-compatible encodings like UTF8 or latin1 are not affected by this PHP issue...
