4737 matches found
CVE-2010-4974
SQL injection vulnerability in info.php in BrotherScripts BS and ScriptsFeed Auto Dealer allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2010-4976
Cross-site scripting XSS vulnerability in search/search.php in MetInfo 3.0 allows remote attackers to inject arbitrary web script or HTML via the searchword parameter aka Search Box field. NOTE: some of these details are obtained from third party information...
CVE-2010-4879
PHP remote file inclusion vulnerability in dompdf.php in dompdf 0.6.0 beta1 allows remote attackers to execute arbitrary PHP code via a URL in the inputfile parameter...
CVE-2010-4884
PHP remote file inclusion vulnerability in guestbook/gbook.php in Gaestebuch 1.2 allows remote attackers to execute arbitrary PHP code via a URL in the scriptpfad parameter...
CVE-2011-3182
PHP before 5.3.7 does not properly check the return values of the malloc, calloc, and realloc library functions, which allows context-dependent attackers to cause a denial of service NULL pointer dereference and application crash or trigger a buffer overflow by leveraging the ability to provide a...
DEBIAN-CVE-2011-3128
WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 treats unattached attachments as published, which might allow remote attackers to obtain sensitive data via vectors related to wp-includes/post.php...
WordPress Themes Vulnerability
TimThumb, a PHP script that is reused in many popular themes for the WordPress blog software, contains a vulnerability that allows a remote attacker to upload arbitrary PHP code to an affected site. US-CERT encourages users and administrators to: determine if any hosted blogs use TimThumb by...
About CGI exploits-vulnerability warning-the black bar safety net
CGI vulnerability has always been easy to be people ignore the problem, but also is widespread, and shortly before the break PCWEEK LINUX hack is to use the CGI a vulnerability. I myself know of and from a foreign site, it seems that some of the CGI vulnerabilities to write some use of CGI in the...
Aphpkb 0.95.4 PHP Execution
------------------------------------------------------------------------ --PoC--...
PHP <5.2.5 formatted_print.c整数溢出漏洞
No description provided by source...
PHP <5.3.2 phar扩展多个格式化字符串漏洞
No description provided by source...
PHP <=5.2.7 跨站脚本攻击漏洞
No description provided by source...
PHP <5.2.9 JSON_parser函数拒绝服务漏洞
No description provided by source...
PHP <5.3.4 utf8_decode函数输入验证漏洞
No description provided by source...
PHP 5.2.4,5.2.5 curl/interface.c安全设置绕过漏洞
No description provided by source...
php <5.3.6 phar扩展phar_object.c拒绝服务和信息泄露漏洞
No description provided by source...
PHP 5.x<5.3.6 Intl扩展NumberFormatter::setSymbol()函数拒绝服务漏洞
No description provided by source...
PHP <5.3.4 mt_rand函数整数溢出漏洞
No description provided by source...
PHP < 5.3.6 'OpenSSL' Extension - 'openssl_encrypt' Plaintext Data Memory Leak Denial of Service
source: https://www.securityfocus.com/bid/46977/info PHP is prone to multiple remote denial-of-service vulnerabilities that affect the 'OpenSSL' extension. Successful attacks will cause the application to consume excessive memory, creating a denial-of-service condition. Versions prior to PHP 5.3....
A1 Dezine New Zealand SQL Injection
Exploit Title : A1 Dezine New Zealand web development Firm Sql Injection Vunerability Author : eXeSoul Contact : [email protected] Date : 14-02-2011 HomePage : www.indishell.in Version : all Tested on : stloop source Vulnerability Style : PHP Sql Injection Vunerability Vendor: http://a1dezine.com...