4724 matches found
PHP <5.3.4 utf8_decode函数输入验证漏洞
No description provided by source...
PHP 5.2.4,5.2.5 curl/interface.c安全设置绕过漏洞
No description provided by source...
php <5.3.6 phar扩展phar_object.c拒绝服务和信息泄露漏洞
No description provided by source...
PHP <5.3.4 mt_rand函数整数溢出漏洞
No description provided by source...
PHP 5.x<5.3.6 Intl扩展NumberFormatter::setSymbol()函数拒绝服务漏洞
No description provided by source...
PHP < 5.3.6 'OpenSSL' Extension - 'openssl_encrypt' Plaintext Data Memory Leak Denial of Service
source: https://www.securityfocus.com/bid/46977/info PHP is prone to multiple remote denial-of-service vulnerabilities that affect the 'OpenSSL' extension. Successful attacks will cause the application to consume excessive memory, creating a denial-of-service condition. Versions prior to PHP 5.3....
A1 Dezine New Zealand SQL Injection
Exploit Title : A1 Dezine New Zealand web development Firm Sql Injection Vunerability Author : eXeSoul Contact : [email protected] Date : 14-02-2011 HomePage : www.indishell.in Version : all Tested on : stloop source Vulnerability Style : PHP Sql Injection Vunerability Vendor: http://a1dezine.com...
SOL12597 - PHP vulnerability CVE-2010-4156
PHP vulnerability CVE-2010-4156 describes a vulnerability where the mbstrcut function in Libmbfl 1.1.0, as used in PHP 5.3.x through 5.3.3, allows context-dependent attackers to obtain potentially sensitive information via a large value of the third parameter aka the length parameter. Information...
php: hang on numeric value 2.2250738585072011e-308 with x87 fpu
strtod.c, as used in the zendstrtod function in PHP 5.2 before 5.2.17 and 5.3 before 5.3.5, and other products, allows context-dependent attackers to cause a denial of service infinite loop via a certain floating-point value in scientific notation, which is not properly handled in x87 FPU...
php: NULL pointer dereference in ZipArchive::getArchiveComment
The ZipArchive::getArchiveComment function in PHP 5.2.x through 5.2.14 and 5.3.x through 5.3.3 allows context-dependent attackers to cause a denial of service NULL pointer dereference and application crash via a crafted ZIP archive...
php: hang on numeric value 2.2250738585072011e-308 with x87 fpu
strtod.c, as used in the zendstrtod function in PHP 5.2 before 5.2.17 and 5.3 before 5.3.5, and other products, allows context-dependent attackers to cause a denial of service infinite loop via a certain floating-point value in scientific notation, which is not properly handled in x87 FPU...
php: XSS and SQL injection bypass via crafted overlong UTF-8 encoded string
Integer overflow in the xmlutf8decode function in ext/xml/xml.c in PHP before 5.2.11 makes it easier for remote attackers to bypass cross-site scripting XSS and SQL injection protection mechanisms via a crafted string that uses overlong UTF-8 encoding, a different vulnerability than CVE-2010-3870...
PHPKit 1.6.1 R2 - 'overview.php' SQL Injection
----------------------------Information------------------------------------------------ +Name : PHPKit = 1.6.1 R2 overview.php SQL injection Vulnerability Exploit +Autor : Easy Laster +Date : 22.10.2010 +Script : PHPKit 1.6.1 R2 +Price : free +Language : PHP +Discovered by Easy Laster +Security...
CVE-2010-2950
Format string vulnerability in stream.c in the phar extension in PHP 5.3.x through 5.3.3 allows context-dependent attackers to obtain sensitive information memory contents and possibly execute arbitrary code via a crafted phar:// URI that is not properly handled by the pharstreamflush function,...
Format string
Format string vulnerability in stream.c in the phar extension in PHP 5.3.x through 5.3.3 allows context-dependent attackers to obtain sensitive information memory contents and possibly execute arbitrary code via a crafted phar:// URI that is not properly handled by the pharstreamflush function,...
ES Simple Download 1.0. - Local File Inclusion
ES Simple Download 1.0. - Local File Inclusion ----------------------------Information------------------------------------------------ +Name : ES Simple Download v 1.0. Local File Exclusion/LFI +Autor : Kazza +email : [email protected] +Date : 09.09.2010 +Script : ES Simple Download v 1.0. +Pric...
Remote file inclusion
PHP remote file inclusion vulnerability in system/application/views/public/commentform.php in EZPX Photoblog 1.2 beta allows remote attackers to execute arbitrary PHP code via a URL in the tplbasedir parameter...
DB[CMS] - 'article.php' SQL Injection
DBCMS article.php SQL Injection Vulnerability ------------------------------------------------------------------------------------------- Author: blackraptor Mail: [email protected] Script Home: http://www.debliteck.com/how.php Dork: "Designed and Developed by Debliteck Ltd"...
CVE-2010-1915
The pregquote function in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context-dependent attackers to obtain sensitive information memory contents by causing a userspace interruption of an internal function, related to the call time pass by reference feature, modification of ZVALs whose...
CVE-2010-1917
Stack consumption vulnerability in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context-dependent attackers to cause a denial of service PHP crash via a crafted first argument to the fnmatch function, as demonstrated using a long string...