PHP Information Disclosure Vulnerability (CNVD-2016-02884)

PHP is an open source general-purpose computer scripting language maintained by the PHP Group and the open source community. PHP has a security vulnerability that allows remote attackers to exploit a vulnerability to read the 'offset' parameter from arbitrary memory...

PHP 'exif_read_data()' function information disclosure vulnerability

PHP is an open source general-purpose computer scripting language maintained by the PHP Group and the open source community. A security vulnerability in the PHP 'exifreaddata' function allows remote attackers to exploit the vulnerability to read heap memory...

PHP ZipArchive::getFrom* Integer Overflow Vulnerability

PHP PHP: Hypertext Preprocessor, PHP: Hypertext Preprocessor is an open source general-purpose computer scripting language maintained by the PHP Group and the open source community.PHP ZipArchive is an extension class that comes with PHP that enables compression and decompression of ZIP files. An...

PHP Man-in-the-Middle Attack Vulnerability

PHP PHP: Hypertext Preprocessor is an open source general-purpose computer scripting language maintained by the PHP Group and the open source community. A security vulnerability exists in the MySQL native driver for PHP, which can be exploited by an attacker to perform a man-in-the-middle attack,...

[SECURITY] Fedora 22 Update: php-5.6.19-1.fc22

PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is...

The vulnerability of the PHP interpreter allows attackers to execute arbitrary code.

The vulnerability of the phpstrReplaceInSubject function ext/standard/string.c in the PHP interpreter is related to errors in the code. Exploiting this vulnerability allows an attacker to execute arbitrary code by entering special parameters remotely...

PHP 'ext/standard/exec.c' file integer overflow vulnerability

PHP PHP: Hypertext Preprocessor is an open source general-purpose computer scripting language maintained by the PHP Group and the open source community. The language supports multiple syntaxes, multiple databases and operating systems, and support for C, C++ for program extensions and so on. An...

PHP 'DateInterval' Object Arbitrary Code Execution Vulnerability

PHP PHP: Hypertext Preprocessor is an open source general-purpose computer scripting language maintained by the PHP Group and the open source community. The language supports multiple syntaxes, multiple databases and operating systems, and support for C, C++ for program extensions and so on. An...

PHP PHAR Denial of Service Vulnerability

PHP is an open source general-purpose computer scripting language maintained by the PHP Group and the open source community. A denial-of-service vulnerability exists in PHP PHAR, which allows an attacker to submit a special request to crash an application, resulting in a denial of service...

PHP 'spl_array.c' Remote Code Execution Vulnerability

PHP PHP: Hypertext Preprocessor, PHP: Hypertext Preprocessor is an open source general-purpose computer scripting language maintained by the PHP Group and the open source community. A remote code execution vulnerability exists in PHP. An attacker could exploit this vulnerability to execute...

PHP 'xsltprocessor.c' Denial of Service Vulnerability

PHP an open source general-purpose computer scripting language. PHP 'xsltprocessor.c' has a null pointer back-reference condition that allows remote attackers to exploit a vulnerability to submit a special request for a denial of service attack...

Multiple Remote Code Execution Vulnerabilities in PHP

PHP is a widely used general-purpose scripting language that is particularly well suited for web development and can be embedded in HTML. PHP has multiple remote code execution vulnerabilities in the unserialize function, which can be exploited by an attacker to execute arbitrary code...

[SECURITY] [DSA 3344-1] php5 security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3344-1 [email protected] https://www.debian.org/security/ Sebastien Delafond August 27, 2015 https://www.debian.org/security/faq -...

DSA-3344-1 php5 - security update

Bulletin has no description...

Pligg CMS 2.0.2 - Cross-Site Request Forgery (Add Admin)

Pligg CMS 2.0.2 - Cross-Site Request Forgery Add Admin Admin input name="password" type="text" class="form-control" id="password" value="hacker123" onchange="checkPasswordthis.va...

Pligg CMS 2.0.2 - Arbitrary Code Execution

Hacked '; Code You Can Customize Exploit For Your Self . Exploit : -- phpecho ' Hacked '; /php /textare...

PHP PCRE Extension 'trunk/pcre_exec.c' Information Disclosure Vulnerability

PHP PHP: Hypertext Preprocessor is an open source general-purpose computer scripting language maintained by the PHP Group and the open source community. The language supports multiple syntaxes, multiple databases and operating systems, and support for C, C++ for program extensions and so on. An...

php: integer overflow in ftp_genlist() resulting in heap overflow (improved fix for CVE-2015-4022)

Integer overflow in the ftpgenlist function in ext/ftp/ftp.c in PHP before 5.4.42, 5.5.x before 5.5.26, and 5.6.x before 5.6.10 allows remote FTP servers to execute arbitrary code via a long reply to a LIST command, leading to a heap-based buffer overflow. NOTE: this vulnerability exists because ...

php: use after free vulnerability in unserialize() with DateTimeZone

A use-after-free flaw was found in the unserialize function of PHP's DateTimeZone implementation. A malicious script author could possibly use this flaw to disclose certain portions of server memory...

php: heap buffer overflow in enchant_broker_request_dict()

A heap buffer overflow flaw was found in the enchantbrokerrequestdict function of PHP's enchant extension. A specially crafted tag input could possibly cause a PHP application to crash...