169 matches found
CVE-2015-10141
CVE-2015-10141 Exploit Title: xdebug Unauthenticated Command Execution Exploit Author: D3Ext Vendor Homepage: https://xdebug.org/ Sofware Link: https://pecl.php.net/package/xdebug/2.5.5/windows Version: 2.5.5 Tested on: Kali Linux 2025 CVE: CVE-2015-10141 설명 Xdebug 2.5.5 및 이전 버전PHP 디버깅 확장 프로그램에는...
laravel-filemanager-unrestricted-upload
Laravel FileManager 제한 없는 파일 업로드 CVE-2025-56399 CWE-434: 위험한 유형의 파일 제한 없는 업로드 CVSS 점수: 8.5 높음 📋 설명 이 도구는 CVE-2025-56399 의 개념 증명PoC 을 제공합니다. 이는 alexusmai/laravel-file-manager 버전 ≤ 3.3.1의 중요한 취약점입니다. 이 취약점은 인증된 공격자 가 조작된 파일을 업로드하고, 클라이언트 측 유효성 검사를 우회한 후 PHP 확장자로 이름을 변경하여 원격 코드 실행RCE 을 달성할 수 있게 합니다....
cve-2024-37762
설명 MachForm 버전 21까지는 인증된 무제한 파일 업로드에 영향을 받아 원격 코드 실행이 가능합니다. 이 애플리케이션은 파일 업로드 기능이 있는 양식을 생성할 수 있는 기능을 제공합니다. 기본적으로 허용되는 파일은 일반적인 안전한 하위 집합으로 제한되지만, 양식 작성자는 추가로 허용할 형식을 지정할 수 있습니다. 양식 생성 권한이 있는 사용자가 'PHP' 형식이 허용된 파일 업로드 기능이 있는 양식을 만들면, 인증되지 않은 사용자도 이 양식을 악용하여 원격 코드 실행을 얻을 수 있습니다. 위험 심각도: 치명적 CVSS...
[SECURITY] Fedora 45 Update: php-pecl-mongodb2-2.5.2-1.fc45
The purpose of this driver is to provide exceptionally thin glue between MongoDB and PHP, implementing only fundemental and performance-critical components necessary to build a fully-functional MongoDB driver...
Oracle Linux 9 : php:8.2 (ELSA-2026-40416)
The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-40416 advisory. php 8.2.32-1 - rebase to 8.2.32 php-pecl-apcu 5.1.23-1 - update to 5.1.23 for PHP 8.2 RHEL-14699 php-pecl-rrd 2.0.3-4 - build for PHP 8.1 2070040 2.0.3-3 -...
CVE-2026-49972
Laravel-Mediable before 7.0.0 contains a file upload vulnerability that allows unauthenticated attackers to achieve remote code execution by uploading a file with an embedded PHP extension disguised within a double extension such as shell.php.jpg. The PATHINFOFILENAME extraction preserves the inn...
PT-2026-57866
ChurchCRM is an open-source church management system. Prior to version 7.4.0, an authenticated administrator can achieve Remote Code Execution RCE on the server by installing a malicious plugin ZIP archive containing a PHP webshell. The application explicitly includes 'php' in its ALLOWED...
Oracle Linux 8 : php:8.2 (ELSA-2026-22305)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-22305 advisory. libzip php 8.2.31-1 - rebase to 8.2.31 php-pear php-pecl-apcu php-pecl-rrd php-pecl-xdebug3 php-pecl-zip Tenable has extracted the preceding descripti...
CVE-2026-38991
Cockpit 2.13.5 and earlier is affected by a misconfiguration within the Bucket component isFileTypeAllowed function where a specially crafted filename bypasses an extension filter. This allows an authenticated attacker to rename arbitrary files with the .php file extension enabling arbitrary code...
CVE-2026-34415
CVE-2026-34415 affects Xerte Online Toolkits versions ≤ 3.15. The vulnerability is in the elFinder connector endpoint, where incomplete input validation fails to block PHP-executable extensions such as .php4 due to an incorrect regex. This enables an unauthenticated attacker to abuse an attack pa...
CVE-2026-34735
The CVE concerns Hytale Modding Wiki (version 1.2.0 and prior). The issue resides in the quickUpload() endpoint: MIME-type validation via PHP finfo is performed, but the stored filename is constructed from the client-supplied extension (getClientOriginalExtension()). These independent checks allo...
PT-2026-7872
Name of the Vulnerable Software and Affected Versions FrankenPHP versions prior to 1.11.2 Description FrankenPHP’s CGI path splitting logic improperly handles Unicode characters during case conversion. The logic computes the split index for finding .php on a lowercased copy of the request path bu...
pearweb SQL注入漏洞
PearWeb is a PHP extension and application repository developed by PEAR. Versions of PearWeb prior to 1.33.0 contained a SQL injection vulnerability. This vulnerability stemmed from the category deletion process, where an SQL injection could be exploited by attackers through the use of category I...
pearweb SQL注入漏洞
PearWeb is a PHP extension and application repository developed by PEAR. Versions of PearWeb prior to 1.33.0 contained a SQL injection vulnerability. This vulnerability occurred due to the use of the user::maintains function, which provided role filters as arrays and inserted IN clauses,...
php:8.2 security update
An update is available for module.php, module.php-pecl-apcu, php-pecl-rrd, php-pecl-zip, php, module.php-pecl-zip, module.php-pecl-rrd, php-pecl-apcu, php-pecl-xdebug3, module.php-pecl-xdebug3. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a...
MiracleLinux 4 : php-pecl-apc-3.1.9-2.AXS4 (AXSA:2012-588:01)
The remote MiracleLinux 4 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2012-588:01 advisory. APC is a free, open, and robust framework for caching and optimizing PHP intermediate code. Security issues fixed with this release: CVE-2010-3294 Cross-site...
php: pgsql extension does not check for errors during escaping
A flaw was found in PHP. Missing error checking could result in SQL injection, and missing error handling could lead to crashes due to null pointer dereferences...
EUVD-2007-4238
Malware in sbrugna...