SUSE CVE-2014-4721

The phpinfo implementation in ext/standard/info.c in PHP before 5.4.30 and 5.5.x before 5.5.14 does not ensure use of the string data type for the PHPAUTHPW, PHPAUTHTYPE, PHPAUTHUSER, and PHPSELF variables, which might allow context-dependent attackers to obtain sensitive information from process...

php: type confusion issue in phpinfo() leading to information leak

A type confusion issue was found in PHP's phpinfo function. A malicious script author could possibly use this flaw to disclose certain portions of server memory...

AzDGGuestbook

Product : AzDGGuestbook Version : 1.0.0 WebSite : http://www.azdg.com Problem : phpinfo Description: ------------ test.php =========== ?php phpinfo; ? =========== Exploit: -------- http://somehost/book/test.php...