780 matches found
Code injection
PHP before 5.3.9 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service CPU consumption by sending many crafted parameters...
PHP 5.1.x < 5.1.5 Multiple Vulnerabilities
According to its banner, the version of PHP 5.x installed on the remote host is older than 5.1.5. Such versions may be affected by the following vulnerabilities : - The c-client library 2000, 2001, or 2004 for PHP does not check the safemode or openbasedir functions. CVE-2006-1017 - A buffer...
UBUNTU-CVE-2011-4078
include/iniset.php in Roundcube Webmail 0.5.4 and earlier, when PHP 5.3.7 or 5.3.8 is used, allows remote attackers to trigger a GET request for an arbitrary URL, and cause a denial of service resource consumption and inbox outage, via a Subject header containing only a URL, a related issue to...
Joomla JCE 2.0.10 Shell Upload
After release of vendor supplied patch for JCE's vulnerabilities, AmnPardaz is going to submit related POC for this issue in Perl and PHP after one month for educational purposes. PHP Version: 7.5 Coded By: Mostafa Azizi errorreporting0; iniset"maxexecutiontime",0; iniset"defaultsockettimeout", 2...
InnovaStudio WYSIWYG Editor 3.1 [php version]arbitrary file upload vulnerability and fix-vulnerability warning-the black bar safety net
Exploits an arbitrary file uploadmagicquotesgpc=Off Vulnerability file: assetmanager.php POST inpCurrFolder2=/var/www/shell. php%0 0 Vulnerability code: paragraph 4 line 2 ifisset$FILES"File1" ifisset$POST"inpCurrFolder2"$currFolder=$POST'inpCurrFolder2'; //the directory can be configured...
Nmap NSE net: http-php-version
This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Nmap NSE net: http-php-version
Attempts to retrieve the PHP version from a web server. PHP has a number of magic queries that return images or text that can vary with the PHP version. This script uses the following queries: '/?=PHPE9568F36-D428-11d2-A769-00AA001ACF42': gets a GIF logo, which changes on April Fool's Day...
PHP 4.4.x<4.4.9, 5.2.x<5.2.6-r6 memnstr函数拒绝服务漏洞
No description provided by source...
PHP <5.2.8 rfc822_write_address()函数缓冲区溢出漏洞
No description provided by source...
PHP <5.2.5 多个拒绝服务漏洞
No description provided by source...
PHP <5.2.5 httpd.conf保护机制绕过安全漏洞
No description provided by source...
PHP <5.2.6 cgi_main.c URI 安全模式绕过漏洞
No description provided by source...
PHP <4.4.8,5.2.x<5.2.6 escapeshellcmd 拒绝服务漏洞
No description provided by source...
PHP <5.2.8 imageRotate()未初始化内存信息泄露漏洞
No description provided by source...
PHP <5.2.12,5.3.0 multipart-form-data拒绝服务攻击漏洞
No description provided by source...
PHP 5.2.x<5.2.14,5.3.x<5.3.3 html_entity_decode函数信息泄露漏洞
No description provided by source...
PHP <5.2.12 htmlspecialcharacters()畸形多字节字符跨站脚本攻击漏洞
No description provided by source...
PHP 5.2.5 多个函数安全模式绕过漏洞
No description provided by source...