SOL12597 - PHP vulnerability CVE-2010-4156

PHP vulnerability CVE-2010-4156 describes a vulnerability where the mbstrcut function in Libmbfl 1.1.0, as used in PHP 5.3.x through 5.3.3, allows context-dependent attackers to obtain potentially sensitive information via a large value of the third parameter aka the length parameter. Information...

php: hang on numeric value 2.2250738585072011e-308 with x87 fpu

strtod.c, as used in the zendstrtod function in PHP 5.2 before 5.2.17 and 5.3 before 5.3.5, and other products, allows context-dependent attackers to cause a denial of service infinite loop via a certain floating-point value in scientific notation, which is not properly handled in x87 FPU...

php: hang on numeric value 2.2250738585072011e-308 with x87 fpu

strtod.c, as used in the zendstrtod function in PHP 5.2 before 5.2.17 and 5.3 before 5.3.5, and other products, allows context-dependent attackers to cause a denial of service infinite loop via a certain floating-point value in scientific notation, which is not properly handled in x87 FPU...

php: NULL pointer dereference in ZipArchive::getArchiveComment

The ZipArchive::getArchiveComment function in PHP 5.2.x through 5.2.14 and 5.3.x through 5.3.3 allows context-dependent attackers to cause a denial of service NULL pointer dereference and application crash via a crafted ZIP archive...

php: XSS and SQL injection bypass via crafted overlong UTF-8 encoded string

Integer overflow in the xmlutf8decode function in ext/xml/xml.c in PHP before 5.2.11 makes it easier for remote attackers to bypass cross-site scripting XSS and SQL injection protection mechanisms via a crafted string that uses overlong UTF-8 encoding, a different vulnerability than CVE-2010-3870...

PHPKit 1.6.1 R2 - 'overview.php' SQL Injection

----------------------------Information------------------------------------------------ +Name : PHPKit = 1.6.1 R2 overview.php SQL injection Vulnerability Exploit +Autor : Easy Laster +Date : 22.10.2010 +Script : PHPKit 1.6.1 R2 +Price : free +Language : PHP +Discovered by Easy Laster +Security...

CVE-2010-2950

Format string vulnerability in stream.c in the phar extension in PHP 5.3.x through 5.3.3 allows context-dependent attackers to obtain sensitive information memory contents and possibly execute arbitrary code via a crafted phar:// URI that is not properly handled by the pharstreamflush function,...

Format string

Format string vulnerability in stream.c in the phar extension in PHP 5.3.x through 5.3.3 allows context-dependent attackers to obtain sensitive information memory contents and possibly execute arbitrary code via a crafted phar:// URI that is not properly handled by the pharstreamflush function,...

ES Simple Download 1.0. - Local File Inclusion

ES Simple Download 1.0. - Local File Inclusion ----------------------------Information------------------------------------------------ +Name : ES Simple Download v 1.0. Local File Exclusion/LFI +Autor : Kazza +email : [email protected] +Date : 09.09.2010 +Script : ES Simple Download v 1.0. +Pric...

Remote file inclusion

PHP remote file inclusion vulnerability in system/application/views/public/commentform.php in EZPX Photoblog 1.2 beta allows remote attackers to execute arbitrary PHP code via a URL in the tplbasedir parameter...

DB[CMS] - 'article.php' SQL Injection

DBCMS article.php SQL Injection Vulnerability ------------------------------------------------------------------------------------------- Author: blackraptor Mail: [email protected] Script Home: http://www.debliteck.com/how.php Dork: "Designed and Developed by Debliteck Ltd"...

CVE-2010-1915

The pregquote function in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context-dependent attackers to obtain sensitive information memory contents by causing a userspace interruption of an internal function, related to the call time pass by reference feature, modification of ZVALs whose...

CVE-2010-1917

Stack consumption vulnerability in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context-dependent attackers to cause a denial of service PHP crash via a crafted first argument to the fnmatch function, as demonstrated using a long string...

MOPS-2010-001: PHP hash_update_file() Already Freed Resource Access Vulnerability

MOPS-2010-001: PHP hashupdatefile Already Freed Resource Access Vulnerability May 1st, 2010 During Month of PHP Bugs in 2007 the same vulnerability was already disclosed to the general public. Because the issue remained unfixed for three years the Month of PHP Security 2010 starts with this old...

CVE-2010-1860

The htmlentitydecode function in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context-dependent attackers to obtain sensitive information memory contents or trigger memory corruption by causing a userspace interruption of an internal call, related to the call time pass by reference feature...

CVE-2010-1864

The addcslashes function in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context-dependent attackers to obtain sensitive information memory contents by causing a userspace interruption of an internal function, related to the call time pass by reference feature...

PHP "addcslashes()" Information Disclosure Vulnerability

No description provided by source. Stefan Esser has reported a vulnerability in PHP, which can be exploited by malicious people to disclose potentially sensitive information. The vulnerability is caused due to the implementation of "addcslashes" function not being properly protected against...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in Insky CMS 006-0111, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the ROOT parameter to 1 city.get/city.get.php, 2 city.get/index.php, 3 message2.send/message.send.php, 4...

CVE-2010-0983

PHP remote file inclusion vulnerability in include/mail.inc.php in Rezervi 3.0.2 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the root parameter, a different vector than CVE-2007-2156...

To bypass the PHP web site Access Denied-vulnerability warning-the black bar safety net

registerglobals = On ? php $sqlcontent = "? PHP exit"Access Denied"; ?& gt;".$ p."\ n"; fileputcontents$logfile, $sqlcontent; ?& gt; exp-demo. php? logfile=php://filter/write=convert. base64-decode/resource=abc. php&p=aPD9waHAgcGhwaW5mbygpOy8vPz4= http://marc.info/?l=full-disclosure& ... 7 1&w=2...