756 matches found
PHP 5.1.14 多个缓冲区溢出漏洞
No description provided by source...
PHP <5.2.7 error_log绕过安全模式限制漏洞
No description provided by source...
PHP 5.2.x<5.2.13,5.3.x<5.3.3 preg_quote函数信息泄漏漏洞
No description provided by source...
PHP 5.2.x<5.2.14,5.3.x<5.3.3 html_entity_decode函数信息泄露漏洞
No description provided by source...
PHP <5.3.6 _zip_name_locate 拒绝服务漏洞
No description provided by source...
PHP <5.3.4 PCNTL扩展拒绝服务漏洞
No description provided by source...
PHP 5.2.x<5.2.15,5.3.x<5.3.4 GD扩展'imagepstext()'函数缓冲区溢出漏洞
No description provided by source...
PHP 5.2.x<5.2.14,5.3.x<5.3.3 SplObjectStorage unserializerd代码执行漏洞
No description provided by source...
PHP 5.2.x<5.2.15,5.3.x<5.3.4 Zend引擎释放后使用拒绝服务漏洞
No description provided by source...
PHP 5.x<5.3.6 Zip扩展stream_get_contents拒绝服务漏洞
No description provided by source...
CVE-2011-0421
The zipnamelocate function in zipnamelocate.c in the Zip extension in PHP before 5.3.6 does not properly handle a ZIPARCHIVE::FLUNCHANGED argument, which might allow context-dependent attackers to cause a denial of service NULL pointer dereference via an empty ZIP archive that is processed with a...
PHP <= 5.3.6 shmop_read() Integer Overflow DoS
Exploit for linux platform in category dos / poc 0day.today 2018-02-02...
Re: PHP 5.3.5 grapheme_extract() NULL Pointer Dereference
On Wed, 16 Feb 2011 16:11:23 -0700 cxib wrote: Affected Software: - PHP 5.3.5 grapheme is neither part of PHP core, nor built-in PHP extension, therefore above is false as bug is not in PHP itself. People using PHP 5.3.5 but not using grapheme some distros like Debian and derrivatives offer this...
CVE-2010-4700
The setmagicquotesruntime function in PHP 5.3.2 and 5.3.3, when the MySQLi extension is used, does not properly interact with use of the mysqlifetchassoc function, which might make it easier for context-dependent attackers to conduct SQL injection attacks via crafted input that had been properly...
PHP 5.2 < 5.2.17 / 5.3 < 5.3.5 String To Double Conversion DoS
Binary data 801108.prm...
PHP 5.2.x < 5.2.17 / 5.3.x < 5.3.5 String To Double Conversion DoS
Binary data 5740.prm...
php-filter -- Denial of Service
The following DoS condition in filter extension was fixed in PHP 5.3.4 and PHP 5.2.15: Stack consumption vulnerability in the filtervar function in PHP 5.2.x through 5.2.14 and 5.3.x through 5.3.3, when FILTERVALIDATEEMAIL mode is used, allows remote attackers to cause a denial of service memory...
PHP 5.3.x < 5.3.4 Multiple Vulnerabilities
Binary data 5732.prm...
www.eVuln.com : XSS vulnerability in WWWThreads (php version)
www.eVuln.com advisory: XSS vulnerability in WWWThreads php version Summary: http://evuln.com/vulns/155/summary.html Details: http://evuln.com/vulns/155/description.html -----------Summary----------- eVuln ID: EV0155 Software: n/a Vendor: WWWThreads Version: 2006.11.25 Critical Level: low Type:...
EUVD-2010-4132
The mbstrcut function in Libmbfl 1.1.0, as used in PHP 5.3.x through 5.3.3, allows context-dependent attackers to obtain potentially sensitive information via a large value of the third parameter aka the length parameter...