php: Heap use after free in ext/standard/var_unserializer.re

ext/standard/varunserializer.re in PHP 7.0.x through 7.0.22 and 7.1.x through 7.1.8 is prone to a heap use after free while unserializing untrusted data, related to improper use of the hash API for key deletion in a situation with an invalid array size. Exploitation of this issue can have an...

PHP Security Bypass Vulnerability (CNVD-2018-09561)

PHP PHP: Hypertext Preprocessor is an open source general-purpose computer scripting language maintained by the PHP Group and the open source community. The language supports multiple syntaxes, multiple databases and operating systems, and support for C, C++ for program extensions and so on. A...

EUVD-2018-2619

An issue was discovered in ext/phar/pharobject.c in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1.x before 7.1.17, and 7.2.x before 7.2.5. There is Reflected XSS on the PHAR 403 and 404 error pages via request data of a request for a .phar file. NOTE: this vulnerability exists because of an...

Yahei-PHP Prober Cross-Site Scripting Vulnerability

Yahei-PHP Proberv is a tool for detecting server information such as server hard disk resources, memory usage, network card traffic, system load and IP. A cross-site scripting vulnerability exists in the proberv.php file in Yahei-PHP Proberv version 0.4.7. A remote attacker can exploit this...

Mitel Connect ONSITE and Mitel ST conferencing component PHP vulnerability (CNVD-2018-07949)

Mitel Connect ONSITE and Mitel ST are both products of Mitel Corporation of Canada.Mitel Connect ONSITE is a unified communications management appliance.ST is a video conferencing product.conferencing component is one of the components with conferencing capabilities. A security vulnerability exis...

Mitel Connect ONSITE and Mitel ST conferencing component PHP vulnerabilities

Mitel Connect ONSITE and Mitel ST are both products of Mitel Corporation of Canada.Mitel Connect ONSITE is a unified communications management appliance.ST is a video conferencing product.conferencing component is one of the components with conferencing capabilities. A security vulnerability exis...

CVE-2018-8957

CoverCMS v1.1.6 has XSS via the fourth input box to index.php, related to admina/mconfigs.inc.php...

Configuration file write vulnerability in ZZCMS version 8.2

zzcms is a free website builder developed in asp language. There is a configuration file writing vulnerability in the index.php file of zzcms version 8.2, which can be exploited by an attacker to write some configuration information into the configuration file to gain server privileges...

CVE-2018-7736

In Z-BlogPHP 1.5.1.1740, cmd.php has XSS via the ZCBLOGSUBNAME parameter or ZCUPLOADFILETYPE parameter. NOTE: the software maintainer disputes that this is a vulnerability...

ALPINE-CVE-2018-7584

In PHP through 5.6.33, 7.0.x before 7.0.28, 7.1.x through 7.1.14, and 7.2.x through 7.2.2, there is a stack-based buffer under-read while parsing an HTTP response in the phpstreamurlwraphttpex function in ext/standard/httpfopenwrapper.c. This subsequently results in copying a large string...

php.testsparker.com XSS vulnerability

Open Bug Bounty ID: OBB-570169 Description| Value ---|--- Affected Website:| php.testsparker.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CentOS Web Panel Cross-Site Scripting Vulnerability

CentOS Web Panel is a CentOS Lnuix system administration panel. A cross-site scripting vulnerability exists in the index.php file in CentOS Web Panel 0.9.8.12 and earlier versions. A remote attacker can exploit this vulnerability by sending the 'id' parameter to the phpinieditor module or the...

WordPress responsive-coming-soon-page plugin cross-site scripting vulnerability (CNVD-2018-01258)

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language , the platform supports PHP and MySQL servers to set up a personal blog site . responsive-coming-soon-page plugin is used in one of the test system maintenance plugin . A cross-site scriptin...

CVE-2018-0001

A remote, unauthenticated attacker may be able to execute code by exploiting a use-after-free defect found in older versions of PHP through injection of crafted data via specific PHP URLs within the context of the J-Web process. Affected releases are Juniper Networks Junos OS: 12.1X46 versions...

b2evolution PHP Code Execution Vulnerability

b2evolution is a PHP and MySQL based blogging software developed by software developer Francois Planque. A PHP code execution vulnerability exists in the basic installation functionality of b2evolution versions 6.6.0 through 6.8.10. An attacker can exploit this vulnerability to execute PHP code...

WDMyCloud < 2.30.165 - Multiple Vulnerabilities

WDMyCloud Multiple Vulnerabilities Vendor: Western Digital Product: WDMyCloud Version: = 2.30.165 Website: https://www.wdc.com/products/network-attached-storage.html / / / / / / / / / / / / / / / / / / / / / \ / // / // / / / / / / / // / / / /,/// // /// // GulfTech Research and Development...

FS Ebay Clone SQL Injection Vulnerability

FS Ebay Clone is an online auction and shopping website script based on PHP and MySQL. A SQL injection vulnerability exists in FS Ebay Clone version 1.0. A remote attacker can inject SQL into the product.php file by sending the 'id' parameter to the product.php file, or the search.php file by...

Fiyo CMS SQL Injection Vulnerability (CNVD-2018-00247)

Fiyo CMS is a content management system CMS for creating CMS templates. A SQL injection vulnerability exists in the /system/site.php file in Fiyo CMS version 2.0.7. A remote attacker can exploit the vulnerability to retrieve data from the database...

LvyeCMS Public tologin function cross-site scripting vulnerability

LvyeCMS is a content management system developed using the ThinkPHP framework and an independent grouping approach. A cross-site scripting vulnerability exists in the Public tologin function of the admin.php file in LvyeCMS 3.1 and earlier versions. A remote attacker can exploit this vulnerabilit...

I, Librarian Catalog Enumeration Vulnerability

Scilico I, Librarian is the United States Scilico company a set of online PDF document management system. A security vulnerability exists in the jqueryFileTree.php file in Scilico I, Librarian versions 4.6 and earlier and 4.7. An attacker can exploit the vulnerability to enumerate directories...