PHP 5.2.x < 5.2.15 Multiple Vulnerabilities

Binary data 5733.prm...

PHP 5.2.x < 5.2.15 Multiple Vulnerabilities

Binary data 801097.prm...

php security update

CentOS Errata and Security Advisory CESA-2010:0919 Updated php packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4 and 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS...

PHP < 5.2.13 / 5.3.x < 5.3.2 Multiple Vulnerabilities

Binary data 5346.prm...

Croogo 1.2.1 - Multiple Cross-Site Request Forgery Vulnerabilities

----------------------------------------------------------------------------------------------- Title: Croogo 1.2.1 Multiple CSRF Vulnerabilities Author: Milos Zivanovic Email: milosz.securityatgmaildotcom Date: 07. February 2010...

PHP 5.2.11/5.3.0 multiple vulnerabilities-vulnerability warning-the black bar safety net

? php / PHP 5.2.11/5.3.0 symlink openbasedir bypass by Maksymilian Arciemowicz cxib a. T securityreason d0t com CHUJWAMWMUZG / $fakedir="cx"; $fakedep=1 6; $num=0; // offset of symlink.$ num if! empty$GET'file' $file=$GET'file'; else if! empty$POST'file' $file=$POST'file'; else $file=""; echo...

Mandriva Linux Security Advisory : php (MDVSA-2009:324)

Multiple vulnerabilities was discovered and corrected in php : The dbareplace function in PHP 5.2.6 and 4.x allows context-dependent attackers to cause a denial of service file truncation via a key with the NULL byte. NOTE: this might only be a vulnerability in limited circumstances in which the...

PHP 5.2.115.3.0 - Multiple Vulnerabilities

PHP 5.2.115.3.0 - Multiple Vulnerabilities This is exploit from Security Audit Lab - SecurityReason labs. Author : Maksymilian Arciemowicz Script for legal use only. PHP 5.2.11 5.3.0 symlink openbasedir bypass More: SecurityReason '; ifempty$file exit; if!iswritable"." die"not writable directory"...

PHP 5.2.11/5.3.0 - Multiple Vulnerabilities

This is exploit from Security Audit Lab - SecurityReason labs. Author : Maksymilian Arciemowicz Script for legal use only. PHP 5.2.11 5.3.0 symlink openbasedir bypass More: SecurityReason '; ifempty$file exit; if!iswritable"." die"not writable directory"; $level=0; for$as=0;$as$fakedep;$as++...

CVE-2009-3492

Loggix Project up to version 9.4.5 is affected by Multiple PHP remote file inclusion vulnerabilities . An attacker can provide a URL in the pathToIndex parameter to (1) Calendar.php, (2) Comment.php, (3) Rss.php, (4) Trackback.php in lib/Loggix/Module/, and (5) modules/downloads/lib/LM_Downloads....

PHP Multiple Vulnerabilities (Sep 2009)

PHP is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:php:php"; ifdescription...

PHP < 5.2.11 Multiple Vulnerabilities

Binary data 5178.prm...

PHP < 5.2.11 Multiple Vulnerabilities

Binary data 801105.prm...

CVE-2008-7152

CVE-2008-7152 affects Specimen Image Database (SID). The vulnerability is a PHP remote file inclusion in SID’s web interface, exploitable via the dir parameter in client.php or taxonservice.php when register_globals is enabled. This could allow an attacker to execute arbitrary PHP code on the ser...

PHP 5.x < 5.2.10 Multiple Vulnerabilities

Binary data 5080.prm...

unclassified NewsBoard 1.6.4 - Multiple Vulnerabilities

Author girex Homepage girex.altervista.org Date 31/05/2009 CMS Unclassified NewsBoard 1.6.4 and maybe lower Dork "This board is powered by the Unclassified NewsBoard software, 1.6.4" Multiple remote vulnerabilities 1 Remote SQL Injection php.ini regardless 2 Logs File Disclosure registerglobals =...

Debian DSA-1789-1 : php5 - several vulnerabilities

Several remote vulnerabilities have been discovered in the PHP 5 hypertext preprocessor. The Common Vulnerabilities and Exposures project identifies the following problems. The following four vulnerabilities have already been fixed in the stable lenny version of php5 prior to the release of lenny...

DSA-1789-1 php5 - several vulnerabilities

Bulletin has no description...

Ubuntu 9.04 : php5 vulnerabilities (USN-761-2)

USN-761-1 fixed vulnerabilities in PHP. This update provides the corresponding updates for Ubuntu 9.04. It was discovered that PHP did not sanitize certain error messages when displayerrors is enabled, which could result in browsers becoming vulnerable to cross-site scripting attacks when...

Mandriva Linux Security Advisory : php (MDVSA-2009:045)

A number of vulnerabilities have been found and corrected in PHP : improve mbflfiltconvhtmldecflush error handling in ext/mbstring/libmbfl/filters/mbfilterhtmlent.c CVE-2008-5557. Additionally on Mandriva Linux 2009.0 and up the php-mbstring module is linked against a separate shared libmbfl...