4737 matches found
macOS 10.15.x < 10.15.3 / 10.14.x < 10.14.6 / 10.13.x < 10.13.6
The remote host is running a version of macOS / Mac OS X that is 10.15.x prior to 10.15.3, 10.13.x prior to 10.13.6, 10.14.x prior to 10.14.6. It is, therefore, affected by multiple vulnerabilities: - In PHP versions 7.1.x below 7.1.33, 7.2.x below 7.2.24 and 7.3.x below 7.3.11 in certain...
Security Bulletin: API Connect is impacted by a vulnerability in PHP (CVE-2019-11043)
Summary IBM API Connect has addressed the following vulnerability. Vulnerability Details CVEID: CVE-2019-11043 DESCRIPTION: In PHP versions 7.1.x below 7.1.33, 7.2.x below 7.2.24 and 7.3.x below 7.3.11 in certain configurations of FPM setup it is possible to cause FPM module to write past allocat...
NewStart CGSL CORE 5.05 / MAIN 5.05 : php Vulnerability (NS-SA-2020-0001)
The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has php packages installed that are affected by a vulnerability: - In PHP versions 7.1.x below 7.1.33, 7.2.x below 7.2.24 and 7.3.x below 7.3.11 in certain configurations of FPM setup it is possible to cause FPM module to write...
8tupian image encryption platform i***_ch***.php file has SQL injection vulnerability
8tupian Image Encryption Platform is a web platform that can encrypt images. A SQL injection vulnerability exists in the 8tupian Image Encryption Platform ich.php file. An attacker can exploit the vulnerability to obtain sensitive database information...
Car Rental Project 1.0 Remote Code Execution
Exploit Title: Car Rental Project v.1.0 Remote Code Execution Google Dork: N/A Date: 1/3/2020 Exploit Author: FULLSHADE Vendor Homepage: https://phpgurukul.com/ Software Link: https://phpgurukul.com/car-rental-project-php-mysql-free-download/ Version: 1.0 Tested on: Windows CVE : CVE-2020-5509...
Security Bulletin: IBM BladeCenter Advanced Management Module (AMM) is affected by vulnerability in PHP (CVE-2018-19518)
Summary IBM BladeCenter Advanced Management Module AMM has addressed the following vulnerability in PHP. Vulnerability Details CVEID: CVE-2018-19518 DESCRIPTION: University of Washington IMAP Toolkit 2007f on UNIX, as used in imapopen in PHP and other products, launches an rsh command by means of...
Support Incident Tracker Cross-Site Scripting Vulnerability (CNVD-2020-04724)
Support Incident Tracker SiT! is a PHP and MySQL based technical support phone/email tracking system. A cross-site scripting vulnerability exists in the Short Application Name and Application Name fields of the config.php page in version 3.67 of SiT! The vulnerability stems from the lack of prope...
Arbitrary File Deletion Vulnerability in Yunyou City Substation System
CloudYou CMS is a free + open source urban substation content management system based on TP5.0 framework as the core development. YunYu city substation system Up.php file exists arbitrary file deletion vulnerability. Attackers can modify the parameters to delete arbitrary files...
NewStart CGSL CORE 5.04 / MAIN 5.04 : php Vulnerability (NS-SA-2019-0214)
The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has php packages installed that are affected by a vulnerability: - In PHP versions 7.1.x below 7.1.33, 7.2.x below 7.2.24 and 7.3.x below 7.3.11 in certain configurations of FPM setup it is possible to cause FPM module to write...
The vulnerability in the ext/phar/phar_object.c component of the PHP interpreter allows attackers to execute cross-site scripting (XSS) attacks.
The vulnerability in the ext/phar/pharobject.c component of the PHP interpreter exists due to the lack of measures taken to protect web page structures. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting XSS attacks remotely...
Command Execution Vulnerability in Blue Route Blog System si***_mo***.php Page
Blue Route Blog System is built with PHP+MySQL. A command execution vulnerability exists in the simo.php page of the Blue Route blog system, which can be exploited by an attacker to perform malicious operations...
Exploit for Out-of-bounds Write in Php
CVE-2019-11043 0th3rs Security Team ================...
PHP Remote Code Execution Vulnerability (CVE-2019-11043)
Certain versions of PHP 7 running on NGINX with php-fpm enabled can be vulnerable to the remote code execution vulnerability CVE-2019-11043. Given the simplicity of the exploit, all web servers using the vulnerable version of PHP should be upgraded to non-vulnerable PHP versions as soon as...
Ubuntu 16.04 LTS / 18.04 LTS : PHP vulnerability (USN-4166-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4166-1 advisory. It was discovered that PHP incorrectly handled certain paths when being used in FastCGI configurations. A remote attacker could possibly use this issu...
USN-4166-1: PHP vulnerability
It was discovered that PHP incorrectly handled certain paths when being used in FastCGI configurations. A remote attacker could possibly use this issue to execute arbitrary code...
Exploit for Out-of-bounds Write in Php
PHP Remote Code Execution Vulnerability CVE-2019-11043...
PT-2019-13870 · Mitsubishi · Me-Rtu
Name of the Vulnerable Software and Affected Versions: Mitsubishi Electric Europe B.V. ME-RTU devices versions 2.02 and earlier INEA ME-RTU devices versions 3.0 and earlier Description: An issue allows an attacker to inject malicious code directly into the application through stored cross-site...
Command execution vulnerability in PbootCMS Pa***.php page
PbootCMS is a new core and permanent open source free PHP enterprise website development and construction management system , is a set of free commercial PHP CMS source code , to meet the needs of enterprise website development and construction . A command execution vulnerability exists in the...
PHP Remote Code Execution Vulnerability (CNVD-2019-36855)
PHP PHP: Hypertext Preprocessor is an open source general-purpose computer scripting language maintained by the PHP Group and the open source community. PHP suffers from a remote code execution vulnerability. An attacker can cause remote code execution through careful construction and exploitatio...
