4742 matches found
CVE-2003-1292
PHP remote file include vulnerability in Derek Ashauer ashNews 0.83 allows remote attackers to include and execute arbitrary remote files via a URL in the pathtoashnews parameter to 1 ashnews.php and 2 ashheadlines.php...
CVE-2003-1302
The IMAP functionality in PHP before 4.3.1 allows remote attackers to cause a denial of service via an e-mail message with a 1 To or 2 From header with an address that contains a large number of "" backslash characters...
CVE-2003-1314
PHP remote file inclusion vulnerability in admin/auth.php in EternalMart Guestbook EMGB 1.1 allows remote attackers to execute arbitrary PHP code via a URL in the emgbadminpath parameter...
CVE-2003-1402
PHP remote file inclusion vulnerability in hit.php for Kietu 2.0 and 2.3 allows remote attackers to execute arbitrary PHP code via the urlhit parameter, a different vulnerability than CVE-2006-5015...
CVE-2003-1436
PHP remote file inclusion vulnerability in nukebrowser.php in Nukebrowser 2.1 to 2.5 allows remote attackers to execute arbitrary PHP code via the filhead parameter...
CVE-2003-1500
PHP remote file inclusion vulnerability in functions.php in cpCommerce 0.5f allows remote attackers to execute arbitrary code via the prefix parameter...
AutoRank PHP < 2.0.4 - SQL Injection (PoC)
AutoRank PHP SQL Injection Vendor: JMB Software Product: AutoRank PHP Version: = 2.0.4 Website: http://www.jmbsoft.com/ BID: 9251 Description: The description as taken from the Autorank website "AutoRank PHP is our next generation toplist software, written completely in PHP and backed by a MySQL...
CVE-2003-0860
Buffer overflows in PHP before 4.3.3 have unknown impact and unknown attack vectors...
CVE-2003-0861
Integer overflows in 1 base64encode and 2 the GD library for PHP before 4.3.3 have unknown impact and unknown attack vectors...
myPHPCalendar : Informations Disclosure, File Include
Informations : °°°°°°°°°°°°° Language : PHP Version : 10192000 Build 1 Beta Website : http://myphpcalendar.sourceforge.net/ Problems : - Informations Disclosure - File Include PHP Code/Location : °°°°°°°°°°°°°°°°°°° admin.php, contacts.php, convert-date.php : ------------------------ include...
PHP 4.x - DLOpen Memory Disclosure (1)
PHP 4.x - DLOpen Memory Disclosure 1 // source: https://www.securityfocus.com/bid/8405/info A vulnerability has been reported to present itself in the dlopen function contained in the PHP source. The issue occurs when PHP is used in conjunction with the Apache web server. A local attacker may...
PHP 4.x - DLOpen Memory Disclosure (2)
// source: https://www.securityfocus.com/bid/8405/info A vulnerability has been reported to present itself in the dlopen function contained in the PHP source. The issue occurs when PHP is used in conjunction with the Apache web server. A local attacker may exploit this issue to gain unauthorized...
PHP 4.x - DLOpen Memory Disclosure (1)
// source: https://www.securityfocus.com/bid/8405/info A vulnerability has been reported to present itself in the dlopen function contained in the PHP source. The issue occurs when PHP is used in conjunction with the Apache web server. A local attacker may exploit this issue to gain unauthorized...
PHP < 4.3.3 php_check_safe_mode_include_dir Function Safemode Bypass
According to its banner, the version of PHP 4.3.x installed on the remote host is prior to 4.3.2. It is, therefore, potentially affected by an information disclosure vulnerability. Due to a flaw in the function phpsafemodeincludedir, a local attacker could bypass safe mode and gain unauthorized...
pMachine (PHP) : Include() Security Hole
Informations : °°°°°°°°°°°°° Language : PHP Version : Free 2.2.1 Website : http://www.pmachine.com Problem : Include Security Hole PHP Code/Location : °°°°°°°°°°°°°°°°°°° This will work if registerglobals is ON OR OFF. /pm/lib.inc.php : ------------------------------------------------------------...
[VULNERABILITY] PHP 'poster version.two'
Hi Guys, This is my first time posting a vulnerability since most of my private research has been done on very small projects, many of which were never released. Anyways, down to the vulnerability: Poster version.two privilege escalation: ======================================== Poster version.tw...
IdeaBox include.php ideaDir Parameter Remote File Inclusion
It is possible to make the remote host include PHP files hosted on a third-party server using ideabox. An attacker may use this flaw to inject arbitrary code in the remote host and gain a shell with the privileges of the web server. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Ref: Date:...
CVE-2002-0484
moveuploadedfile in PHP does not does not check for the base directory openbasedir, which could allow remote attackers to upload files to unintended locations on the system...
CVE-2003-0166
Integer signedness error in emalloc function for PHP before 4.3.2 allow remote attackers to cause a denial of service memory consumption and possibly execute arbitrary code via negative arguments to functions such as 1 socketrecv, 2 socketrecvfrom, and possibly other functions...
CVE-2003-0166
Integer signedness error in emalloc function for PHP before 4.3.2 allow remote attackers to cause a denial of service memory consumption and possibly execute arbitrary code via negative arguments to functions such as 1 socketrecv, 2 socketrecvfrom, and possibly other functions...