@lex Guestbook livre_include.php chem_absolu Parameter Remote File Inclusion

The remote host seems to be running @lex guestbook, a guestbook web application written in PHP. The reported version may permit remote attackers, without prior authentication, to include and execute malicious PHP scripts. By modifying the 'chemabsolu' parameter of the 'livreinclude.php' script, i...

CVE-2004-1693

PHP remote file inclusion vulnerability in Function.php in Mambo 4.5 1.0.9 allows remote attackers to execute arbitrary PHP code by modifying the mosConfigabsolutepath parameter to reference a URL on a remote web server that contains the code...

[VulnWatch] Php Vulnerability N. 2

Let's go for the second one: ========================================= Title: Overwrite $FILE array in rfc1867 - Mime multipart/form-data File Upload Affected: Php = 5.0.1 Not Affected: it seems none Vulnerability Type: Possible write of a downloaded file in an arbitrary location. Vendor Status:...

PHP 4.x5.0.1 - PHP_Variables Remote Memory Disclosure

PHP 4.x5.0.1 - PHPVariables Remote Memory Disclosure source: https://www.securityfocus.com/bid/11334/info A vulnerability is reported to present itself in the array parsing functions of the 'phpvariables.c' PHP source file. The vulnerability occurs when a PHP script is being used to print URI...

php -- vulnerability in RFC 1867 file upload processing

Stefano Di Paola discovered an issue with PHP that could allow someone to upload a file to any directory writeable by the httpd process. Any sanitizing performed on the prepended directory path is ignored. This bug can only be triggered if the $FILES element name contains an underscore...

SAFE TEAM Regulus Customers Accounts Password Hash Disclosure

Binary data 2272.prm...

CVE-2004-0263

PHP 4.3.4 and earlier in Apache 1.x and 2.x modphp can leak global variables between virtual hosts that are handled by the same Apache child process but have different settings, which could allow remote attackers to obtain sensitive information...

CVE-2004-0070

PHP remote file inclusion vulnerability in module.php for ezContents allows remote attackers to execute arbitrary PHP code by modifying the link parameter to reference a URL on a remote web server that contains the code...

CVE-2004-0128

PHP remote file inclusion vulnerability in the GEDCOM configuration script for phpGedView 2.65.1 and earlier allows remote attackers to execute arbitrary PHP code by modifying the PGVBASEDIRECTORY parameter to reference a URL on a remote web server that contains a malicious theme.php script...

CVE-2004-1660

PHP remote file inclusion vulnerability in CuteNews 1.3.6 and earlier allows remote attackers to execute arbitrary PHP code via the cutepath parameter to 1 showarchives.php or 2 shownews.php...

PHP < 4.3.1 CGI Module File Access

Binary data 1477.prm...

PHP < 4.1.2 POST Request file_upload Overflow

Binary data 1485.prm...

PHP < 4.0.4 php.cgi Shell Access Overflow

Binary data 1482.prm...

PHP < 4.2.2 Malformed POST Requests

Binary data 1476.prm...

PHP Arbitrary File Upload

Binary data 2286.prm...

PHP Topsites 'counter.php' Arbitrary File Overwrite

Binary data 1533.prm...

PHP < 4.2.3 Mail Function Header Spoofing

Binary data 1481.prm...

Basilix Webmail id Variable SQL Injection

The remote host appears to be running a BasiliX version 1.1.0 or lower. Such versions are potentially vulnerable to SQL injection attacks depending on the version of PHP installed. %NASLMINLEVEL 70300 This script was written by George A. Theall, . See the Nessus Scripts License for details...

CVE-2004-0530

The PHP package in Slackware 8.1, 9.0, and 9.1, when linked against a static library, includes /tmp in the search path, which allows local users to execute arbitrary code as the PHP user by inserting shared libraries into the appropriate path...

Mandrake Linux Security Advisory : php (MDKSA-2004:068)

"Stefan Esser discovered a remotely exploitable vulnerability in PHP where a remote attacker could trigger a memorylimit request termination in places where an interruption is unsafe. This could be used to execute arbitrary code. As well, Stefan Esser also found a vulnerability in the handling of...