4723 matches found
CVE-2003-1227
PHP remote file include vulnerability in index.php for Gallery 1.4 and 1.4-pl1, when running on Windows or in Configuration mode on Unix, allows remote attackers to inject arbitrary PHP code via a URL in the GALLERYBASEDIR parameter, a different vulnerability than CVE-2002-1412. NOTE: this issue...
CVE-2003-1500
PHP remote file inclusion vulnerability in functions.php in cpCommerce 0.5f allows remote attackers to execute arbitrary code via the prefix parameter...
CVE-2003-1253
PHP remote file inclusion vulnerability in Bookmark4U 1.8.3 allows remote attackers to execute arbitrary PHP code viaa URL in the prefix parameter to 1 dbase.php, 2 config.php, or 3 common.load.php...
CVE-2003-1402
PHP remote file inclusion vulnerability in hit.php for Kietu 2.0 and 2.3 allows remote attackers to execute arbitrary PHP code via the urlhit parameter, a different vulnerability than CVE-2006-5015...
CVE-2003-1240
PHP remote file inclusion vulnerability in CuteNews 0.88 allows remote attackers to execute arbitrary PHP code via a URL in the cutepath parameter in 1 shownews.php, 2 search.php, or 3 comments.php...
CVE-2003-1436
PHP remote file inclusion vulnerability in nukebrowser.php in Nukebrowser 2.1 to 2.5 allows remote attackers to execute arbitrary PHP code via the filhead parameter...
CVE-2003-1412
PHP remote file inclusion vulnerability in index.php for GONiCUS System Administrator GOsa 1.0 allows remote attackers to execute arbitrary PHP code via the plugin parameter to 1 3fax/1blocklists/index.php; 2 6departamentadmin/index.php, 3 5terminals/index.php, 4 4mailinglists/index.php, 5...
AutoRank PHP < 2.0.4 - SQL Injection (PoC)
AutoRank PHP SQL Injection Vendor: JMB Software Product: AutoRank PHP Version: = 2.0.4 Website: http://www.jmbsoft.com/ BID: 9251 Description: The description as taken from the Autorank website "AutoRank PHP is our next generation toplist software, written completely in PHP and backed by a MySQL...
CVE-2003-0860
Buffer overflows in PHP before 4.3.3 have unknown impact and unknown attack vectors...
CVE-2003-0861
Integer overflows in 1 base64encode and 2 the GD library for PHP before 4.3.3 have unknown impact and unknown attack vectors...
myPHPCalendar : Informations Disclosure, File Include
Informations : °°°°°°°°°°°°° Language : PHP Version : 10192000 Build 1 Beta Website : http://myphpcalendar.sourceforge.net/ Problems : - Informations Disclosure - File Include PHP Code/Location : °°°°°°°°°°°°°°°°°°° admin.php, contacts.php, convert-date.php : ------------------------ include...
PHP 4.x - DLOpen Memory Disclosure (1)
PHP 4.x - DLOpen Memory Disclosure 1 // source: https://www.securityfocus.com/bid/8405/info A vulnerability has been reported to present itself in the dlopen function contained in the PHP source. The issue occurs when PHP is used in conjunction with the Apache web server. A local attacker may...
PHP 4.x - DLOpen Memory Disclosure (2)
// source: https://www.securityfocus.com/bid/8405/info A vulnerability has been reported to present itself in the dlopen function contained in the PHP source. The issue occurs when PHP is used in conjunction with the Apache web server. A local attacker may exploit this issue to gain unauthorized...
PHP 4.x - DLOpen Memory Disclosure (1)
// source: https://www.securityfocus.com/bid/8405/info A vulnerability has been reported to present itself in the dlopen function contained in the PHP source. The issue occurs when PHP is used in conjunction with the Apache web server. A local attacker may exploit this issue to gain unauthorized...
PHP < 4.3.3 php_check_safe_mode_include_dir Function Safemode Bypass
According to its banner, the version of PHP 4.3.x installed on the remote host is prior to 4.3.2. It is, therefore, potentially affected by an information disclosure vulnerability. Due to a flaw in the function phpsafemodeincludedir, a local attacker could bypass safe mode and gain unauthorized...
pMachine (PHP) : Include() Security Hole
Informations : °°°°°°°°°°°°° Language : PHP Version : Free 2.2.1 Website : http://www.pmachine.com Problem : Include Security Hole PHP Code/Location : °°°°°°°°°°°°°°°°°°° This will work if registerglobals is ON OR OFF. /pm/lib.inc.php : ------------------------------------------------------------...
[VULNERABILITY] PHP 'poster version.two'
Hi Guys, This is my first time posting a vulnerability since most of my private research has been done on very small projects, many of which were never released. Anyways, down to the vulnerability: Poster version.two privilege escalation: ======================================== Poster version.tw...
IdeaBox include.php ideaDir Parameter Remote File Inclusion
It is possible to make the remote host include PHP files hosted on a third-party server using ideabox. An attacker may use this flaw to inject arbitrary code in the remote host and gain a shell with the privileges of the web server. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Ref: Date:...
CVE-2002-0484
moveuploadedfile in PHP does not does not check for the base directory openbasedir, which could allow remote attackers to upload files to unintended locations on the system...
CVE-2003-0166
Integer signedness error in emalloc function for PHP before 4.3.2 allow remote attackers to cause a denial of service memory consumption and possibly execute arbitrary code via negative arguments to functions such as 1 socketrecv, 2 socketrecvfrom, and possibly other functions...