CVE-2008-5844

PHP 5.2.7 contains an incorrect change to the FILTERUNSAFERAW functionality, and unintentionally disables magicquotesgpc regardless of the actual magicquotesgpc setting, which might make it easier for context-dependent attackers to conduct SQL injection attacks and unspecified other attacks...

Sql injection

PHP 5.2.7 contains an incorrect change to the FILTERUNSAFERAW functionality, and unintentionally disables magicquotesgpc regardless of the actual magicquotesgpc setting, which might make it easier for context-dependent attackers to conduct SQL injection attacks and unspecified other attacks...

SE-2008-06.txt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SektionEins GmbH www.sektioneins.de -= Security Advisory =- Advisory: PHP ZipArchive::extractTo Directory Traversal Vulnerability Release Date: 2008/12/04 Last Modified: 2008/12/04 Author: Stefan Esser stefan.esseratsektioneins.de Application: PHP 5 =...