658 matches found
MOPS-2010-018: EFront ask_chat chatrooms_ID SQL Injection Vulnerability
MOPS-2010-018: EFront askchat chatroomsID SQL Injection Vulnerability May 9th, 2010 A preauth SQL injection vulnerability was discovered in the chat feature of EFront that allows retrieving all data from the database by simple URL manipulation. Affected versions Affected is EFront = 3.6.2 Credits...
PHP "addcslashes()" Information Disclosure Vulnerability
No description provided by source. Stefan Esser has reported a vulnerability in PHP, which can be exploited by malicious people to disclose potentially sensitive information. The vulnerability is caused due to the implementation of "addcslashes" function not being properly protected against...
PHP 5.3.x < 5.3.3 Integer Overflow Vulnerability
PHP is prone to a remote integer overflow vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:php:php"; ifdescription...
PHP < 4.4.5 Multiple Vulnerabilities
PHP is prone to multiple vulnerabilities in the Ovrimos extension. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:php:php";...
Simple forged X-Forwarded-For-bug warning-the black bar safety net
On the forged X-Forwarded-For purposes I will not say more. In the invasion of a PHP station, the GPC is ON, Character type injection all., while in PHP5, the GPC the default is open. But GPC for$SERVER without any effect, So you can fake the$SERVER to achieve the injection to the purpose. IP. in...
Bild Flirt System 2.0 SQL Injection
----------------------------Information------------------------------------------------ +Name : Bild Flirt System V2.0 index.php id SQL Injection +Autor : Easy Laster +Date : 07.03.2010 +Script : Bild Flirt System V2.0 +Download : ------------------ +Demo :http://www.demo1.de/demos/php0124/ +Pric...
Smart Plugs 1.3 SQL Injection
----------------------------Information------------------------------------------------ +Name : smartplugs 1.3 SQL Injection showplugs.php +Autor : Easy Laster +Date : 03.03.2010 +Script : smartplugs 1.3 +Download : ------------- +Demo : http://putenporn.net/stream/webmaster/...
Uiga Personal Portal index.php SQL Injection Vulnerability
No description provided by source. ----------------------------Information------------------------------------------------ +Name : Uiga Personal Portal index.php SQL Injection +Autor : Easy Laster +Date : 28.02.2010 +Script : Uiga Personal Portal +Language :PHP +Discovered by Easy Laster +Securit...
PHP < 5.3.2 / 5.2.13 Multiple Vulnerabilities
Binary data 801102.prm...
PHP 5.2.12 Release Announcement
PHP 5.2.12 Release Announcement The PHP development team would like to announce the immediate availability of PHP 5.2.12. This release focuses on improving the stability of the PHP 5.2.x branch with over 60 bug fixes, some of which are security related. All users of PHP 5.2 are encouraged to...
CentOS 4 : php (CESA-2008:0545)
Updated php packages that fix several security issues and a bug are now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Web...
php168 6.1 login.php 安全模式绕过漏洞
No description provided by source...
php168 6.0 style.php 信息泄漏漏洞
No description provided by source...
php 5.0.5 安全模式绕过
No description provided by source...
php 5.1.2 zend-hash.c 安全模式绕过
No description provided by source...
php 5.1.2 缓冲区溢出
No description provided by source...
php 5.1.2 file.c 权限提升漏洞
No description provided by source...
php 5.1.4 权限提升漏洞
No description provided by source...