4742 matches found
CVE-2015-8874
Stack consumption vulnerability in GD in PHP before 5.6.12 allows remote attackers to cause a denial of service via a crafted imagefilltoborder call...
PI Engine Arbitrary File Download Vulnerability
PI Engine is an open-source CMS system that is more widely used within some Internet companies. The /download.php page of PI Engine is used to provide the file download function, but the function does not impose any restriction on file types, and there are flaws in the checking of paths, so an...
PHP has an unspecified vulnerability (CNVD-2016-02885)
PHP is an open source general-purpose computer scripting language maintained by the PHP Group and the open source community. A security vulnerability in PHP's handling of XML files allows remote attackers to exploit the vulnerability to trigger an xmlparseintostruct segment error...
UBUNTU-CVE-2016-3132
Double free vulnerability in the SplDoublyLinkedList::offsetSet function in ext/spl/spldllist.c in PHP 7.x before 7.0.6 allows remote attackers to execute arbitrary code via a crafted index...
UBUNTU-CVE-2016-4542
The exifprocessIFDTAG function in ext/exif/exif.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 does not properly construct spprintf arguments, which allows remote attackers to cause a denial of service out-of-bounds read or possibly have unspecified other impact via crafted...
SOL71059632 - PHP vulnerability CVE-2015-8616
Vulnerability Recommended Actions None Supplemental Information SOL9970: Subscribing to email notifications regarding F5 products SOL9957: Creating a custom RSS feed to view new and updated documents SOL4602: Overview of the F5 security vulnerability response policy SOL4918: Overview of the F5...
PHP 'mb_strcut()' Function Denial of Service Vulnerability
PHP is an open source general-purpose computer scripting language. The PHP 'mbstrcut' function fails to properly handle string formatting, allowing a remote attacker to exploit the vulnerability by submitting a special request to crash the application...
UBUNTU-CVE-2016-4070
Integer overflow in the phprawurlencode function in ext/standard/url.c in PHP before 5.5.34, 5.6.x before 5.6.20, and 7.x before 7.0.5 allows remote attackers to cause a denial of service application crash via a long string to the rawurlencode function. NOTE: the vendor says "Not sure if this...
ourphp v1.3.1 商品分类页面 type参数SQL注入漏洞
No description provided by source...
WP Robo Gallery v2.0.14 - Code Execution Vulnerability
Document Title: =============== WP Robo Gallery v2.0.14 - Code Execution Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1822 Release Date: ============= 2016-04-12 Vulnerability Laboratory ID VL-ID: ==================================== 182...
PHP 5.5.33 - Invalid Memory Write
Exploit Title: Invalid memory write in phar on filename with \0 in name Date: 2016-03-19 Exploit Author: @vah13 Vendor Homepage: https://secure.php.net/ Software Link: https://github.com/php/php-src Version: 5.5.33 Tested on: Linux Test script: --------------- cat test.php ------------------- ';...
UBUNTU-CVE-2016-3141
Use-after-free vulnerability in wddx.c in the WDDX extension in PHP before 5.5.33 and 5.6.x before 5.6.19 allows remote attackers to cause a denial of service memory corruption and application crash or possibly have unspecified other impact by triggering a wddxdeserialize call on XML data...
F5 Networks BIG-IP : PHP vulnerability (K17127)
The GetCode function in gdgifin.c in GD 2.1.1 and earlier, as used in PHP before 5.5.21 and 5.6.x before 5.6.5, allows remote attackers to cause a denial of service buffer over-read and application crash via a crafted GIF image that is improperly handled by the gdImageCreateFromGif function...
PHP php_str_replace_in_subject function arbitrary code execution vulnerability
PHP is a general-purpose scripting language that can be embedded in HTML. A security vulnerability exists in the function phpstrreplaceinsubject in PHP ext/standard/string.c. By submitting a specially crafted strireplace function parameter, a remote attacker can execute arbitrary code...
F5 Networks BIG-IP : PHP vulnerabilities (SOL16993)
PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 truncates a pathname upon encountering a \x00 character in certain situations, which allows remote attackers to bypass intended extension restrictions and access files or directories with unexpected names via a crafted argument to 1...
CVE-2016-1903
The gdImageRotateInterpolated function in ext/gd/libgd/gdinterpolation.c in PHP before 5.5.31, 5.6.x before 5.6.17, and 7.x before 7.0.2 allows remote attackers to obtain sensitive information or cause a denial of service out-of-bounds read and application crash via a large bgdcolor argument to t...
EUVD-2015-7703
Off-by-one error in the pharparsezipfile function in ext/phar/zip.c in PHP before 5.5.30 and 5.6.x before 5.6.14 allows remote attackers to cause a denial of service uninitialized pointer dereference and application crash by including the / filename in a .zip PHAR archive...
EUVD-2015-7702
The phargetentrydata function in ext/phar/util.c in PHP before 5.5.30 and 5.6.x before 5.6.14 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a .phar file with a crafted TAR archive entry in which the Link indicator references a file that do...
