CVE-2016-10998

The ocim-mp3 plugin through 2016-03-07 for WordPress has wp-content/plugins/ocim-mp3/source/pages.php?id= XSS...

Medium: php71, php72, php73

Issue Overview: An issue was discovered in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. Due to the way rename across filesystems is implemented, it is possible that file being renamed is briefly available with wrong permissions while the rename is ongoing, thus enabling...

Information Disclosure

php is vulnerable to information disclosure. An invalid read in the function exifprocessSOFn allows an attacker to read past allocated buffer and potentially obtain confidential information...

Information Disclosure

php is vulnerable to information disclosure. An out-of-bounds read in the function base64decodexmlrpc in ext/xmlrpc/libxmlrpc/base64.c causes PHP to read memory outside of the allocated buffers...

Information Disclosure

php is vulnerable to information disclosure. An uninitialized read in the function exifprocessIFDinMAKERNOTE allows an attacker to potentially read confidential information off uninitialized memory...

Information Disclosure

php is vulnerable to information disclosire. File rename across filesystems may allow unintended access to the file being renamed while the process is on-going...

Arbitrary Code Execution

php is vulnerable to arbitrary code execution. A heap-based buffer overflow in the function gdImageColorMatch in gdcolormatch.c allows an attacker to execute arbitrary code on the system...

Information Disclosure

php is vulnerable to information disclosure. An attacker is able to read past allocated buffer in the exifprocessIFDTAG function by using malicious files. This can also be used to crash the application...

Denial Of Service (Dos)

php is vulnerable to denial of service. An out-of-bounds read due to integer overflow in the function iconvmimedecodeheaders can lead to information disclosure or allow an attacker to crash the application...

Cross-site Scripting (XSS)

PHP is vulnerable to Cross-site scripting XSS. It is due to a flaw in Apache2 component via body of 'Transfer-Encoding: chunked' request...

Information Disclosure

PHP is vulnerable to information disclosure. It has dumpable FPM child processes which allow bypassing opcache access controls because fpmunix.c calls PRSETDUMPABLE prctl...

Arbitrary Code Execution

php is vulnerable to arbitrary code execution. An integer underflow in the gdContributionsAlloc function in gdinterpolation.c allows remote attackers to execute arbitrary code in the system by decrementing the u variable...

php: Mishandled http_header_value in an atoi() call in http_fopen_wrapper.c

An issue was discovered in PHP 7.0.x before 7.0.27, 7.1.x before 7.1.13, and 7.2.x before 7.2.1. Inappropriately parsing an HTTP response leads to a segmentation fault because httpheadervalue in ext/standard/httpfopenwrapper.c can be a NULL value that is mishandled in an atoi call...

php: Dumpable FPM child processes allow bypassing opcache access controls

An issue was discovered in PHP before 5.6.35, 7.0.x before 7.0.29, 7.1.x before 7.1.16, and 7.2.x before 7.2.4. Dumpable FPM child processes allow bypassing opcache access controls because fpmunix.c makes a PRSETDUMPABLE prctl call, allowing one user in a multiuser environment to obtain sensitive...

php: memcpy with negative length via crafted DNS response

An issue was discovered in PHP 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.2. dnsgetrecord misparses a DNS response, which can allow a hostile DNS server to cause PHP to misuse memcpy, leading to read operations going past the buffer allocated for DNS data. This affects phpparser...

LiveZilla Server SQL Injection Vulnerability

LiveZilla Server is a free online customer service system from LiveZilla Germany. The system provides real-time monitoring of visitors, offline messages, GeoTracking map tracking, access statistics, online chat and other features. A SQL injection vulnerability exists in the server.php file in...

PT-2024-6537 · Php +10 · Php +10

Name of the Vulnerable Software and Affected Versions: PHP versions 8.1. before 8.1.30 PHP versions 8.2. before 8.2.24 PHP versions 8.3. before 8.3.12 Description: The issue is related to errors in security settings of the PHP interpreter. Exploitation of this issue may allow a remote attacker to...

Denial Of Service (DoS)

PHP is vulnerable to denial of serviceDoS attacks. An attacker could exploit a flaw in the PHAR archive handler by supplying a malicious archive file which may leads to crash the PHP interpreter or potentially disclose information due to a buffer over-read in the pharparsepharfile function in...

Denial Of Service (DoS)

php is vulnerable to denial of service DoS. The vulnerability exists in the cdfcountchain function in cdf.c, where a DoS can be caused by parsing a CDF file...

Denial Of Service (DoS)

php is vulnerable to denial of service DoS. The vulnerability exists as the cdfcheckstreamoffset function of cdf.c, where a DoS can be caused by parsing a CDF file...