PHP Array_User_Key_Compare 函数存在缓冲区溢出

No description provided by source...

PHP 5.2.2 Import_Request_Variables 函数过滤不全导致内容欺骗漏洞

No description provided by source...

PHP 5.2.4 htaccess 文件导致safe_mode和open_basedir权限绕过

No description provided by source...

PHP 5.2.2 Wireless Bitmap (WBMP) images 存在整型溢出漏洞

No description provided by source...

PHP 5.2.4 整数溢出导致敏感信息泄露

No description provided by source...

PHP 5.2.125.3.1 - symlink() open_basedir Bypass

PHP 5.2.125.3.1 - symlink openbasedir Bypass This is exploit from Security Audit Lab - SecurityReason labs. Author : Maksymilian Arciemowicz Script for legal use only. PHP 5.2.12 5.3.1 symlink openbasedir bypass More: SecurityReason '; ifempty$file exit; if!iswritable"." die"not writable...

PHP 5.2.12/5.3.1 - 'symlink()' open_basedir Bypass

This is exploit from Security Audit Lab - SecurityReason labs. Author : Maksymilian Arciemowicz Script for legal use only. PHP 5.2.12 5.3.1 symlink openbasedir bypass More: SecurityReason '; ifempty$file exit; if!iswritable"." die"not writable directory"; $level=0; for$as=0;$as$fakedep;$as++...

PHP 5.2.1 哈希表覆盖导致任意代码执行漏洞

No description provided by source...

PHP 5.2.3 safe_mode 存在权限绕过漏洞

No description provided by source...

PHP rfc822_write_address 拒绝服务漏洞

No description provided by source...

PHP posix_access 函数导致safe_mode被绕过

No description provided by source...

PHP magic_quotes_gpc 设计错误导致安全绕过

No description provided by source...

CVE-2009-3559

main/streams/plainwrapper.c in PHP 5.3.x before 5.3.1 does not recognize the safemodeincludedir directive, which allows context-dependent attackers to have an unknown impact by triggering the failure of PHP scripts that perform include or require operations, as demonstrated by a script that...

CVE-2009-3559

main/streams/plainwrapper.c in PHP 5.3.x before 5.3.1 does not recognize the safemodeincludedir directive, which allows context-dependent attackers to have an unknown impact by triggering the failure of PHP scripts that perform include or require operations, as demonstrated by a script that...

CVE-2009-3559

main/streams/plainwrapper.c in PHP 5.3.x before 5.3.1 does not recognize the safemodeincludedir directive, which allows context-dependent attackers to have an unknown impact by triggering the failure of PHP scripts that perform include or require operations, as demonstrated by a script that...

PHP 5.3.0 pdflib file disclosure

Exploit for unknown platform in category web applications ================================ PHP 5.3.0 pdflib file disclosure ================================ Description: ------------ Via this bug , attacker can save a file in path that not allowed in openbasedir . Reproduce code: --------------- ...

PHP 5.3.0 open_basedir Bypass

Description: ------------ Via this bug , attacker can save a file in path that not allowed in openbasedir . Reproduce code: --------------- / if!isset$PATH,$VALUE die'/expl.php?p=pathuwantsavefile/filename&v=valueuwantsav einfile'; $IRCRASH = pdfnew; pdfopenfile$IRCRASH,$PATH;...

PHP 5.3.0 - pdflib Arbitrary File Write

PHP 5.3.0 - pdflib Arbitrary File Write Description: ------------ Via this bug , attacker can save a file in path that not allowed in openbasedir . Reproduce code: --------------- / if!isset$PATH,$VALUE die'/expl.php?p=pathuwantsavefile/filename&v=valueuwantsav einfile'; $IRCRASH = pdfnew;...

SLES9: Security update for PHP

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: php4-gd php4-recode apache2-modphp4 php4-mysql php4-exif php4-pear php4-pgsql php4-devel modphp4-core modphp4-servlet php4-servlet php4-fastcgi php4-session...

SLES9: Security update for PHP

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: php4-gd php4-recode apache2-modphp4 php4-mysql php4-exif php4-pear php4-pgsql php4-devel modphp4-core modphp4-servlet php4-servlet php4-fastcgi php4-session...