Ubuntu 16.04 LTS / 18.04 LTS : PHP vulnerability (USN-4166-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4166-1 advisory. It was discovered that PHP incorrectly handled certain paths when being used in FastCGI configurations. A remote attacker could possibly use this issu...

USN-4166-1: PHP vulnerability

It was discovered that PHP incorrectly handled certain paths when being used in FastCGI configurations. A remote attacker could possibly use this issue to execute arbitrary code...

Exploit for Out-of-bounds Write in Php

PHP Remote Code Execution Vulnerability CVE-2019-11043...

PT-2019-13870 · Mitsubishi · Me-Rtu

Name of the Vulnerable Software and Affected Versions: Mitsubishi Electric Europe B.V. ME-RTU devices versions 2.02 and earlier INEA ME-RTU devices versions 3.0 and earlier Description: An issue allows an attacker to inject malicious code directly into the application through stored cross-site...

PHP Remote Code Execution Vulnerability (CNVD-2019-36855)

PHP PHP: Hypertext Preprocessor is an open source general-purpose computer scripting language maintained by the PHP Group and the open source community. PHP suffers from a remote code execution vulnerability. An attacker can cause remote code execution through careful construction and exploitatio...

Command execution vulnerability in PbootCMS Pa***.php page

PbootCMS is a new core and permanent open source free PHP enterprise website development and construction management system , is a set of free commercial PHP CMS source code , to meet the needs of enterprise website development and construction . A command execution vulnerability exists in the...

CVE-2018-21020

In very rare cases, a PHP type juggling vulnerability in centreonAuth.class.php in Centreon Web before 2.8.27 allows attackers to bypass authentication mechanisms in place...

CVE-2016-10998

The ocim-mp3 plugin through 2016-03-07 for WordPress has wp-content/plugins/ocim-mp3/source/pages.php?id= XSS...

Medium: php71, php72, php73

Issue Overview: An issue was discovered in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. Due to the way rename across filesystems is implemented, it is possible that file being renamed is briefly available with wrong permissions while the rename is ongoing, thus enabling...

Information Disclosure

php is vulnerable to information disclosure. An invalid read in the function exifprocessSOFn allows an attacker to read past allocated buffer and potentially obtain confidential information...

Information Disclosure

php is vulnerable to information disclosire. File rename across filesystems may allow unintended access to the file being renamed while the process is on-going...

Information Disclosure

php is vulnerable to information disclosure. An out-of-bounds read in the function base64decodexmlrpc in ext/xmlrpc/libxmlrpc/base64.c causes PHP to read memory outside of the allocated buffers...

Information Disclosure

php is vulnerable to information disclosure. An uninitialized read in the function exifprocessIFDinMAKERNOTE allows an attacker to potentially read confidential information off uninitialized memory...

Arbitrary Code Execution

php is vulnerable to arbitrary code execution. A heap-based buffer overflow in the function gdImageColorMatch in gdcolormatch.c allows an attacker to execute arbitrary code on the system...

Information Disclosure

php is vulnerable to information disclosure. An attacker is able to read past allocated buffer in the exifprocessIFDTAG function by using malicious files. This can also be used to crash the application...

Denial Of Service (Dos)

php is vulnerable to denial of service. An out-of-bounds read due to integer overflow in the function iconvmimedecodeheaders can lead to information disclosure or allow an attacker to crash the application...

Cross-site Scripting (XSS)

PHP is vulnerable to Cross-site scripting XSS. It is due to a flaw in Apache2 component via body of 'Transfer-Encoding: chunked' request...

Information Disclosure

PHP is vulnerable to information disclosure. It has dumpable FPM child processes which allow bypassing opcache access controls because fpmunix.c calls PRSETDUMPABLE prctl...

Arbitrary Code Execution

php is vulnerable to arbitrary code execution. An integer underflow in the gdContributionsAlloc function in gdinterpolation.c allows remote attackers to execute arbitrary code in the system by decrementing the u variable...

php: Mishandled http_header_value in an atoi() call in http_fopen_wrapper.c

An issue was discovered in PHP 7.0.x before 7.0.27, 7.1.x before 7.1.13, and 7.2.x before 7.2.1. Inappropriately parsing an HTTP response leads to a segmentation fault because httpheadervalue in ext/standard/httpfopenwrapper.c can be a NULL value that is mishandled in an atoi call...