Lucene search
+L

3966 matches found

Exploit DB
Exploit DB
added 2012/11/07 12:00 a.m.57 views

Invision Power Board (IP.Board) 3.3.4 - Unserialize Regex Bypass

?php / So this is the patch that sanitizes, static public function safeUnserialize $serialized // unserialize will return false for object declared with small cap o // as well as if there is any ws between O and : if isstring $serialized && strpos $serialized, "\0" === false if strpos $serialized...

10CVSS5.2AI score0.26049EPSS
SaveExploits15
seebug.org
seebug.org
added 2012/11/04 12:00 a.m.41 views

Invision Power Board <= 3.3.4 "unserialize()" PHP Code Execution

No description provided by source. ?php / ---------------------------------------------------------------- Invision Power Board = 3.3.4 "unserialize" PHP Code Execution ---------------------------------------------------------------- author..............: Egidio Romano aka EgiX...

10CVSS6.4AI score0.26049EPSS
SaveExploits15
Exploit DB
Exploit DB
added 2012/11/01 12:00 a.m.80 views

Invision Power Board (IP.Board) 3.3.4 - 'Unserialize()' PHP Code Execution

?php / ---------------------------------------------------------------- Invision Power Board = 3.3.4 "unserialize" PHP Code Execution ---------------------------------------------------------------- author..............: Egidio Romano aka EgiX mail................: n0b0d13satgmaildotcom software...

10CVSS5.2AI score0.26049EPSS
SaveExploits15
NVD
NVD
added 2007/09/08 10:17 a.m.17 views

CVE-2007-4763

PHP remote file inclusion vulnerability in dbmodules/DBadodb.class.php in PHP Object Framework PHPOF 20040226 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the PHPOFINCLUDEPATH parameter...

7.5CVSS7.6AI score0.02918EPSS
SaveExploits2References5
Cvelist
Cvelist
added 2007/09/08 10:00 a.m.31 views

CVE-2007-4763

PHP remote file inclusion vulnerability in dbmodules/DBadodb.class.php in PHP Object Framework PHPOF 20040226 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the PHPOFINCLUDEPATH parameter...

7.6AI score0.02918EPSS
SaveExploits2References5
Friends Of PHP
Friends Of PHP
added 1970/01/01 12:00 a.m.13 views

CVE-2026-45077: Unauthenticated PHP Object Deserialization in MonologBridge server:log Listener

More info at https://symfony.com/cve-2026-45077...

8.6CVSS5.8AI score0.00447EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder