Mandriva Update for php MDVSA-2010:045 (php)

Check for the Version of php OpenVAS Vulnerability Test Mandriva Update for php MDVSA-2010:045 php Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

PHP 5.3.1 - LCG Entropy Security

PHP 5.3.1 - LCG Entropy Security source: https://www.securityfocus.com/bid/38430/info PHP is prone to a security vulnerability that affects LCG Linear Congruential entropy. Attackers can exploit this issue to steal sessions or other sensitive data. Versions prior to PHP 5.2.13 are affected...

Discuz! 7.0-7.2 the background settings. inc. php to write shell vulnerability-vulnerability warning-the black bar safety net

Impact version Discuz! 7.0-7.2 Vulnerability details: if$operation == 'uc' && iswriteable'./ config.inc.php' && $isfounder $ucdbpassnew = $settingsnew'uc''dbpass' == '' ? UCDBPW : $settingsnew'uc''dbpass'; if$settingsnew'uc''connect' $ucdblink = @mysqlconnect$settingsnew'uc''dbhost',...

CVE-2009-4543

CVE-2009-4543 affects Cromosoft Technologies Facil Helpdesk 2.3 Lite. The issue is a PHP remote file inclusion in index.php via the lng parameter, which can also be triggered to include and execute local files through .. sequences. Documented impact is arbitrary PHP code execution with network ac...

php 4.2.2 CRLF注入漏洞

No description provided by source...

php 5.1.2 string.c 整数溢出漏洞

No description provided by source...

php 5.2.1 str-replace 整数溢出漏洞

No description provided by source...

php 5.2.1 代码执行漏洞

No description provided by source...

php 5.2.1 qlite-decode-binary 缓冲区溢出漏洞

No description provided by source...

php 5.2.1 read-entry 整数溢出漏洞

No description provided by source...

PHP 5.2.2_ Zend Engine 存在拒绝服务漏洞

No description provided by source...

Mini File Host 1.5 - Arbitrary File Upload

===================================================================== ========= / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || || ===================================================================== ========= » Note : This vulnerability...

PHP 5.2.11 - htmlspecialCharacters() Malformed Multibyte Character Cross-Site Scripting (2)

PHP 5.2.11 - htmlspecialCharacters Malformed Multibyte Character Cross-Site Scripting 2 source: https://www.securityfocus.com/bid/37389/info PHP is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execu...

PHP 5.2.11 - 'htmlspecialCharacters()' Malformed Multibyte Character Cross-Site Scripting (1)

source: https://www.securityfocus.com/bid/37389/info PHP is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the...

To bypass the'Access Denied'-a vulnerability warning-the black bar safety net

jackal registerglobals = On ? php $sqlcontent = "? PHP exit’Access Denied’; ?& gt;".$ p."\ n"; fileputcontents$logfile, $sqlcontent; ?& gt;exp-demo. php? logfile=php://filter/write=convert. base64-decode/resource=abc. php&p=aPD9waHAgcGhwaW5mbygpOy8vPz4= http://marc.info/?l=full-disclosure& ... 7...

WSCreator 1.1 Blind SQL Injection

WSCreator 1.1 Blind SQL Injection Name WSCreator Vendor http://www.wscreator.com Versions Affected 1.1 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date 2009-12-15 X. INDEX I. ABOUT THE APPLICATION II. DESCRIPTION III...

CVE-2009-4319

CVE-2009-4319 describes a PHP remote file inclusion in eoCMS (version 0.9.03 and earlier) via js/bbcodepress/bbcode-form.php. The flaw occurs when register_globals is enabled and allows an attacker to execute arbitrary PHP code by supplying a URL in the BBCODE_path parameter. The available source...

CMS <= 1.0 Remote Code Execution in Nuggetz

Exploit for unknown platform in category web applications =========================================== CMS This file is used to save any changes done in nugget. The parameter 'nugget' is used to call the file for ex. support.nugget, which is at /webdir/data/. The changed values are written back to...

Remote file inclusion

PHP remote file inclusion vulnerability in includes/classes/pctemplate.php in PointComma 3.8b2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the pcConfigsmartyPath parameter...

PHP 'ini_restore()' Memory Information Disclosure Vulnerability

No description provided by source. Credit/Author: Maksymilian Arciemowicz from SecurityReason Vulnerable: PHP PHP 5.3 PHP PHP 5.2.10 Debian Linux 5.0 sparc Debian Linux 5.0 s/390 Debian Linux 5.0 powerpc Debian Linux 5.0 mipsel Debian Linux 5.0 mips Debian Linux 5.0 m68k Debian Linux 5.0 ia-64...