3 matches found
BIT-LIBPHP-2020-7067 OOB Read in urldecode()
In PHP versions 7.2.x below 7.2.30, 7.3.x below 7.3.17 and 7.4.x below 7.4.5, if PHP is compiled with EBCDIC support uncommon, urldecode function can be made to access locations past the allocated memory, due to erroneously using signed numbers as array indexes...
Online AgroCulture Farm Management System 1.0 - (uname) SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: Online AgroCulture Farm Management System 1.0 - 'uname' SQL Injection Exploit Author: Tarun Sehgal Vendor Homepage: https://www.sourcecodester.com/ Software Link:...
Internet Bug Bounty: Out-of-Bound Read in urldecode() [CVE-2020-7067]
Hi, Please see: https://bugs.php.net/bug.php?id=79465&edit=2 CVE is assigned CVE-2020-7067 Fixed in 7.4.5 Release: https://www.php.net/ChangeLog-7.php7.4.5 Impact A remote attacker might leak values from the memory by crafting a malicious url-encoded string into PHP's urldecode...