4723 matches found
PHP 5.2.4,5.2.5 curl/interface.c安全设置绕过漏洞
No description provided by source...
php <5.3.6 phar扩展phar_object.c拒绝服务和信息泄露漏洞
No description provided by source...
PHP 5.x<5.3.6 Intl扩展NumberFormatter::setSymbol()函数拒绝服务漏洞
No description provided by source...
PHP <5.3.4 mt_rand函数整数溢出漏洞
No description provided by source...
PHP < 5.3.6 'OpenSSL' Extension - 'openssl_encrypt' Plaintext Data Memory Leak Denial of Service
source: https://www.securityfocus.com/bid/46977/info PHP is prone to multiple remote denial-of-service vulnerabilities that affect the 'OpenSSL' extension. Successful attacks will cause the application to consume excessive memory, creating a denial-of-service condition. Versions prior to PHP 5.3....
A1 Dezine New Zealand SQL Injection
Exploit Title : A1 Dezine New Zealand web development Firm Sql Injection Vunerability Author : eXeSoul Contact : [email protected] Date : 14-02-2011 HomePage : www.indishell.in Version : all Tested on : stloop source Vulnerability Style : PHP Sql Injection Vunerability Vendor: http://a1dezine.com...
SOL12597 - PHP vulnerability CVE-2010-4156
PHP vulnerability CVE-2010-4156 describes a vulnerability where the mbstrcut function in Libmbfl 1.1.0, as used in PHP 5.3.x through 5.3.3, allows context-dependent attackers to obtain potentially sensitive information via a large value of the third parameter aka the length parameter. Information...
php: hang on numeric value 2.2250738585072011e-308 with x87 fpu
strtod.c, as used in the zendstrtod function in PHP 5.2 before 5.2.17 and 5.3 before 5.3.5, and other products, allows context-dependent attackers to cause a denial of service infinite loop via a certain floating-point value in scientific notation, which is not properly handled in x87 FPU...
php: NULL pointer dereference in ZipArchive::getArchiveComment
The ZipArchive::getArchiveComment function in PHP 5.2.x through 5.2.14 and 5.3.x through 5.3.3 allows context-dependent attackers to cause a denial of service NULL pointer dereference and application crash via a crafted ZIP archive...
php: hang on numeric value 2.2250738585072011e-308 with x87 fpu
strtod.c, as used in the zendstrtod function in PHP 5.2 before 5.2.17 and 5.3 before 5.3.5, and other products, allows context-dependent attackers to cause a denial of service infinite loop via a certain floating-point value in scientific notation, which is not properly handled in x87 FPU...
php: XSS and SQL injection bypass via crafted overlong UTF-8 encoded string
Integer overflow in the xmlutf8decode function in ext/xml/xml.c in PHP before 5.2.11 makes it easier for remote attackers to bypass cross-site scripting XSS and SQL injection protection mechanisms via a crafted string that uses overlong UTF-8 encoding, a different vulnerability than CVE-2010-3870...
PHPKit 1.6.1 R2 - 'overview.php' SQL Injection
----------------------------Information------------------------------------------------ +Name : PHPKit = 1.6.1 R2 overview.php SQL injection Vulnerability Exploit +Autor : Easy Laster +Date : 22.10.2010 +Script : PHPKit 1.6.1 R2 +Price : free +Language : PHP +Discovered by Easy Laster +Security...
CVE-2010-2950
Format string vulnerability in stream.c in the phar extension in PHP 5.3.x through 5.3.3 allows context-dependent attackers to obtain sensitive information memory contents and possibly execute arbitrary code via a crafted phar:// URI that is not properly handled by the pharstreamflush function,...
Format string
Format string vulnerability in stream.c in the phar extension in PHP 5.3.x through 5.3.3 allows context-dependent attackers to obtain sensitive information memory contents and possibly execute arbitrary code via a crafted phar:// URI that is not properly handled by the pharstreamflush function,...
ES Simple Download 1.0. - Local File Inclusion
ES Simple Download 1.0. - Local File Inclusion ----------------------------Information------------------------------------------------ +Name : ES Simple Download v 1.0. Local File Exclusion/LFI +Autor : Kazza +email : [email protected] +Date : 09.09.2010 +Script : ES Simple Download v 1.0. +Pric...
Remote file inclusion
PHP remote file inclusion vulnerability in system/application/views/public/commentform.php in EZPX Photoblog 1.2 beta allows remote attackers to execute arbitrary PHP code via a URL in the tplbasedir parameter...
DB[CMS] - 'article.php' SQL Injection
DBCMS article.php SQL Injection Vulnerability ------------------------------------------------------------------------------------------- Author: blackraptor Mail: [email protected] Script Home: http://www.debliteck.com/how.php Dork: "Designed and Developed by Debliteck Ltd"...
CVE-2010-1915
The pregquote function in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context-dependent attackers to obtain sensitive information memory contents by causing a userspace interruption of an internal function, related to the call time pass by reference feature, modification of ZVALs whose...
CVE-2010-1917
Stack consumption vulnerability in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context-dependent attackers to cause a denial of service PHP crash via a crafted first argument to the fnmatch function, as demonstrated using a long string...
MOPS-2010-001: PHP hash_update_file() Already Freed Resource Access Vulnerability
MOPS-2010-001: PHP hashupdatefile Already Freed Resource Access Vulnerability May 1st, 2010 During Month of PHP Bugs in 2007 the same vulnerability was already disclosed to the general public. Because the issue remained unfixed for three years the Month of PHP Security 2010 starts with this old...