4737 matches found
PHP 5.3 'mail.log' Configuration Option 'open_basedir' Restriction Bypass Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/36007/info PHP is prone to an 'openbasedir' restriction-bypass vulnerability because of a design error. Successful exploits could allow an attacker to write files in unauthorized locations. This vulnerability would be an...
PHP 4.x DLOpen Memory Disclosure Vulnerability (2)
No description provided by source. source: http://www.securityfocus.com/bid/8405/info A vulnerability has been reported to present itself in the dlopen function contained in the PHP source. The issue occurs when PHP is used in conjunction with the Apache web server. A local attacker may exploit...
PHP 4.x SafeMode Arbitrary File Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2954/info PHP is the Personal HomePage development toolkit, distributed by the PHP.net, and maintained by the PHP Development Team in public domain. A problem with the toolkit could allow elevated privileges, and...
FAR-PHP 1.0 'index.php' Local File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/30781/info FAR-PHP is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability using directory-traversal strings to view local files...
Infinity <= 2.0.5 Arbitrary Create Admin Exploit
No description provided by source. ?php printr' || || | || o,7 || . o7 || q||| o///, : / / . /QQQQQQQQQQQQQQQQQQQ\ q Infinity = 2.0.5 Create Admin /QQQ/\QQQ\ /QQQQQ/ \QQQQQQ\ q POST 3 /QQQQ/ QQQQ\ /QQQQ/ \QQQQ\ q Owned : |QQQQ/ By Qabandi \QQQQ| |QQQQ| |QQQQ| |QQQQ| From Kuwait, PEACE... |QQQQ|...
PBLang <= 4.65 Remote Command Execution Exploit
No description provided by source. ?php / PBLang 4.65 possibly prior versions remote code execution by rgod - site: http://rgod.altervista.org make these changes in php.ini if you have troubles with this script: allowcalltimepassreference = on registerglobals = on / errorreporting0;...
PHP <= 5.3.1 'session_save_path()' 'safe_mode' Restriction-Bypass Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/38182/info PHP is prone to a 'safemode' restriction-bypass vulnerability. Successful exploits could allow an attacker to write session files in arbitrary directions. This vulnerability would be an issue in shared-hosting...
FOSS Gallery Admin <= 1.0 - Remote Arbitrary Upload Exploit
No description provided by source. ! /usr/bin/perl -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- FOSS Gallery Admin Version = 1.0 / Remote Arbitrary Upload Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Program: FOSS Gallery Adm...
PHP 4.x socket_recvfrom() Signed Integer Memory Corruption Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7198/info A vulnerability has been reported in PHP versions 4.3.1 and earlier. The problem occurs in the socketrecvfrom and may allow an attacker to corrupt memory. Specifically, the affected function fails to carry out...
e107 Code Exec
No description provided by source. Exploit Title: e107 Code Exec Date: 05/22/10 Author: [email protected] Software Link: http://e107.org/edownload.php Version: e107 = 0.7.20 Tested on: Linux/Windows !/usr/bin/perl -w e107 Code Exec // SploitAuthor: [email protected] These scrubs still haven't released ...
Vtiger CRM 5.0.4 Pre-Auth Local File Inclusion Exploit
No description provided by source. !/usr/bin/python INFORMATION: Exploit Title: Vtiger CRM 5.0.4 Pre-Auth Local File Inclusion Exploit Google Dork: The honest Open Source CRM vtiger CRM 5.0.4 Date: 5/3/2011 CVE: CVE-2009-3249 Windows link: http://bit.ly/fiOYCL Linux link: http://bit.ly/hluzLf...
PHP 4.x/5.0.x File Upload GLOBAL Variable Overwrite Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/15250/info PHP is prone to a vulnerability that allows attackers to overwrite the GLOBAL variable via HTTP POST requests. By exploiting this issue, remote attackers may be able to overwrite the GLOBAL variable. This may...
PHP 4.x DLOpen Memory Disclosure Vulnerability (1)
No description provided by source. source: http://www.securityfocus.com/bid/8405/info A vulnerability has been reported to present itself in the dlopen function contained in the PHP source. The issue occurs when PHP is used in conjunction with the Apache web server. A local attacker may exploit...
Cannonbolt Portfolio Manager 1.0 - Multiple Vulnerabilities
No description provided by source. Cannonbolt Portfolio Manager v1.0 Stored XSS and SQL Injection Vulnerabilities Vendor: IWCn Systems Inc. Product web page: http://www.iwcn.ws Affected version: 1.0 Summary: Cannonbolt Portfolio Manager is a sleek and AJAX based PHP script to manage projects and...
open-medium.CMS <= 0.25 (404.php) Remote File Include Vulnerability
No description provided by source. DEVIL TEAM THE BEST POLISH TEAM open-medium 0.25 - Content Management System - Remote File Include Vulnerabilities Find by Kacper Rahim. Greetings For ALL DEVIL TEAM members, Special DragonHeart : Contact: [email protected] or http://www.devilteam.yum.pl code...
PHP <= 5.3.5 socket_connect() Buffer Overflow Vulnerability
No description provided by source. ?php // Credit: Mateusz Kocielski, Marek Kroemeke and Filip Palian // Affected Versions: 5.3.3-5.3.6 echo + CVE-2011-1938; echo + there we go...\n; define'EVILSPACEADDR', \xff\xff\xee\xb3; define'EVILSPACESIZE', 102410248; $SHELLCODE =...
Uebimiau Web-Mail 2.7.10/2.7.2 - Remote File Disclosure Vulnerability
No description provided by source. ---- Uebimiau Web-Mail Remote File Reader ... ITDefence.ru Antichat.ru Uebimiau Web-Mail Remote File Reader Eugene Minaev [email protected] / \ \ \ / .\ / /// // / \ / \ // / / / /// /\ / / / / // / / / / / /\ / / / / / / / / / / / //\ \ / / / / // / //...
USN-2254-2: PHP updates
USN-2254-1 fixed vulnerabilities in PHP. The fix for CVE-2014-0185 further restricted the permissions on the PHP FastCGI Process Manager FPM UNIX socket. This update grants socket access to the www-data user and group so installations and documentation relying on the previous socket permissions...
SOL15316 - PHP vulnerability CVE-2013-4635
Recommended action None Supplemental Information SOL9970: Subscribing to email notifications regarding F5 products SOL9957: Creating a custom RSS feed to view new and updated documents. SOL4602: Overview of the F5 security vulnerability response policy SOL4918: Overview of the F5 critical issue...
EUVD-2014-0275
The cdfunpacksummaryinfo function in cdf.c in the Fileinfo component in PHP before 5.4.29 and 5.5.x before 5.5.13 allows remote attackers to cause a denial of service performance degradation by triggering many fileprintf calls...