PHP 4.3.x/5.0 - 'openlog()' Buffer Overflow

source: https://www.securityfocus.com/bid/7210/info A buffer overflow has been reported in the PHP openlog function. By passing an argument of excessive size to the function, it may be possible for an attacker to overwrite memory, resulting in a denial of service. It is also possible for an...

PHP 4.x - socket_recv() Signed Integer Memory Corruption

PHP 4.x - socketrecv Signed Integer Memory Corruption source: https://www.securityfocus.com/bid/7197/info A vulnerability has been reported in PHP versions 4.3.1 and earlier. The problem occurs in the socketrecv and may allow an attacker to corrupt memory. Specifically, the affected function fail...

PHP 4.x - socket_recvfrom() Signed Integer Memory Corruption

PHP 4.x - socketrecvfrom Signed Integer Memory Corruption source: https://www.securityfocus.com/bid/7198/info A vulnerability has been reported in PHP versions 4.3.1 and earlier. The problem occurs in the socketrecvfrom and may allow an attacker to corrupt memory. Specifically, the affected...

PHP 4.x - 'socket_recvfrom()' Signed Integer Memory Corruption

source: https://www.securityfocus.com/bid/7198/info A vulnerability has been reported in PHP versions 4.3.1 and earlier. The problem occurs in the socketrecvfrom and may allow an attacker to corrupt memory. Specifically, the affected function fails to carry out sanity checks on user-supplied...

PHP 4.3 - socket_iovec_alloc() Integer Overflow

PHP 4.3 - socketiovecalloc Integer Overflow source: https://www.securityfocus.com/bid/7187/info A vulnerability has been reported in PHP versions 4.3.1 and earlier. The problem occurs in the socketiovecalloc and may allow an attacker to corrupt memory. Specifically, the affected function fails to...

PHP socket_iovec_alloc() Function Overflow

The remote host is running a version of PHP that is older than 4.3.2. There is a flaw in this version that could allow an attacker who has the ability to inject an arbitrary argument to the function socketiovecalloc to crash the remote service and possibly to execute arbitrary code. For this atta...

PHP 4.3 - 'socket_iovec_alloc()' Integer Overflow

source: https://www.securityfocus.com/bid/7187/info A vulnerability has been reported in PHP versions 4.3.1 and earlier. The problem occurs in the socketiovecalloc and may allow an attacker to corrupt memory. Specifically, the affected function fails to carry out sanity checks on user-supplied...

postnuke723.txt

Products: Postnuke v 0.723 http://www.postnuke.com Date: 09 March 2003 Author: pokleyzz Contributors: skatscan-associates.net shaharilatscan-associates.net muniratscan-associates.net URL: http://www.scan-associates.net Summary: Postnuke v 0.723 SQL injection and directory traversing Description...

CVE-2003-0097

Unknown vulnerability in CGI module for PHP 4.3.0 allows attackers to access arbitrary files as the PHP user, and possibly execute PHP code, by bypassing the CGI force redirect settings cgi.forceredirect or --enable-force-cgi-redirect...

GONiCUS System Administrator 1.0 - Remote File Inclusion

GONiCUS System Administrator 1.0 - Remote File Inclusion source: https://www.securityfocus.com/bid/6922/info GONiCUS System Administrator is prone to an issue that may allow remote attackers to include files located on remote servers. This issue is present in several PHP pages existing in the...

myphpnuke xss

Vendor: http://www.myphpnuke.com Subject: myphpnuke links.php vulnerability myphpnuke is a website portal tool written in php. There are many Cross Site Scripting issue on myphpnuke . Example: http://WEB/myphpnuke/links.php?op=MostPopular&ratenum=scr!ptalertdocument.cookie;/scr!pt&ratetype=percen...

Kietu ( PHP )

Informations : °°°°°°°°°°°°°° Website : http://kietu.free.fr Version : 2.0, 2.3 Problem : Include file PHP Code/Location : °°°°°°°°°°°°°°°°°°° hit.php : ------------------------------------------------------------------ if !getcfgvar"registerglobals" $kietu"remoteaddr" =...

CVE-2002-1396

Heap-based buffer overflow in the wordwrap function in PHP after 4.1.2 and before 4.3.0 may allow attackers to cause a denial of service or execute arbitrary code...

CVE-2002-2214

The phpifimapmimeheaderdecode function in the IMAP functionality in PHP before 4.2.2 allows remote attackers to cause a denial of service crash via an e-mail header with a long "To" header...

CVE-2002-2106

PHP remote file inclusion vulnerability in WikkiTikkiTavi before 0.21 allows remote attackers to execute arbitrary PHP code via the TemplateDir variable, as demonstrated using conflict.php...

CVE-2002-1878

PHP remote file inclusion vulnerability in w-Agora 4.1.3 allows remote attackers to execute arbitrary PHP code via the incdir parameter...

CVE-2002-2029

PHP, when installed on Windows with Apache and ScriptAlias for /php/ set to c:/php/, allows remote attackers to read arbitrary files and possibly execute arbitrary programs via an HTTP request for php.exe with a filename in the query string...

CVE-2002-2019

PHP remote file inclusion vulnerability in includeonce.php in osCommerce a.k.a. Exchange Project 2.1 allows remote attackers to execute arbitrary PHP code via the includefile parameter...

CVE-2002-2123

PHP remote file inclusion vulnerability in publishxpdocs.php for Gallery 1.3.2 allows remote attackers to inject arbitrary PHP code by specifying a URL to an init.php file in the GALLERYBASEDIR parameter...

CVE-2002-2249

PHP remote file inclusion vulnerability in News Evolution 2.0 allows remote attackers to execute arbitrary PHP commands via the neurl parameter to 1 backend.php, 2 screen.php, or 3 admin/modules/comment.php...