openSUSE: Security Advisory for php7 (openSUSE-SU-2020:0847-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

OPENSUSE-SU-2020:0847-1 Security update for php7

This update for php7 fixes the following issues: Security issue fixed: - CVE-2019-11048: Improved the handling of overly long filenames or field names in HTTP file uploads bsc1171999. This update was imported from the SUSE:SLE-15:Update update project...

Security update for php7 (moderate)

openSUSE Security Update: Security update for php7 Announcement ID: openSUSE-SU-2020:0847-1 Rating: moderate References: 1171999 Cross-References: CVE-2019-11048 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for php7 fixes...

SUSE-SU-2020:1661-1 Security update for php7

This update for php7 fixes the following issues: Security issue fixed: - CVE-2019-11048: Improved the handling of overly long filenames or field names in HTTP file uploads bsc1171999...

SUSE SLES12 Security Update : php7 (SUSE-SU-2020:1545-1)

This update for php7 fixes the following issues : Security issue fixed : CVE-2019-11048: Improved the handling of overly long filenames or field names in HTTP file uploads bsc1171999. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security...

SUSE-SU-2020:1545-1 Security update for php7

This update for php7 fixes the following issues: Security issue fixed: - CVE-2019-11048: Improved the handling of overly long filenames or field names in HTTP file uploads bsc1171999...

Security fix for the ALT Linux 9 package php7 version 7.3.18-alt1

7.3.18-alt1 built June 5, 2020 Anton Farygin in task 252646 June 1, 2020 Anton Farygin - 7.3.18 Fixes: CVE-2019-11048...

Security fix for the ALT Linux 8 package php7 version 7.2.31-alt1

7.2.31-alt1 built June 2, 2020 Anton Farygin in task 252632 June 1, 2020 Anton Farygin - 7.2.31 Fixes: CVE-2019-11048, CVE-2019-11048...

Monstra CMS 3.0.4 - Authenticated Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications Exploit Title: Monstra CMS 3.0.4 - Authenticated Arbitrary File Upload Exploit Author: Kishan Lal Choudhary Vendor Homepage: https://monstra.org Software Link: https://bitbucket.org/awilum/monstra/downloads/monstra-3.0.4.zip Version: 3.0.4...

openSUSE: Security Advisory for php7 (openSUSE-SU-2020:0642-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

SUSE SLED15 / SLES15 Security Update : php7 (SUSE-SU-2020:1199-1)

This update for php7 fixes the following issues : CVE-2020-7064: Fixed a one byte read of uninitialized memory in exifreaddata bsc1168326. CVE-2020-7066: Fixed URL truncation getheaders if the URL contains zero \0 character bsc1168352. Note that Tenable Network Security has extracted the precedin...

openSUSE Security Update : php7 (openSUSE-2020-642)

This update for php7 fixes the following issues : - CVE-2020-7064: Fixed a one byte read of uninitialized memory in exifreaddata bsc1168326. - CVE-2020-7066: Fixed URL truncation getheaders if the URL contains zero \0 character bsc1168352. This update was imported from the SUSE:SLE-15:Update upda...

Security update for php7 (moderate)

openSUSE Security Update: Security update for php7 Announcement ID: openSUSE-SU-2020:0642-1 Rating: moderate References: 1168326 1168352 Cross-References: CVE-2020-7064 CVE-2020-7066 Affected Products: openSUSE Leap 15.1 An update that fixes two vulnerabilities is now available. Description: This...

OPENSUSE-SU-2020:0642-1 Security update for php7

This update for php7 fixes the following issues: - CVE-2020-7064: Fixed a one byte read of uninitialized memory in exifreaddata bsc1168326. - CVE-2020-7066: Fixed URL truncation getheaders if the URL contains zero \0 character bsc1168352. This update was imported from the SUSE:SLE-15:Update updat...

SUSE-SU-2020:1199-1 Security update for php7

This update for php7 fixes the following issues: - CVE-2020-7064: Fixed a one byte read of uninitialized memory in exifreaddata bsc1168326. - CVE-2020-7066: Fixed URL truncation getheaders if the URL contains zero \0 character bsc1168352...

Security fix for the ALT Linux 9 package php7 version 7.3.17-alt1

7.3.17-alt1 built April 24, 2020 Anton Farygin in task 250362 April 21, 2020 Anton Farygin - 7.3.17 Fixes: CVE-2020-7067...

Security fix for the ALT Linux 8 package php7 version 7.2.29-alt1

7.2.29-alt1 built March 27, 2020 Anton Farygin in task 248389 March 24, 2020 Anton Farygin - 7.2.29 Fixes: CVE-2020-7064, CVE-2020-7066...

Security fix for the ALT Linux 9 package php7 version 7.3.16-alt1

7.3.16-alt1 built March 26, 2020 Anton Farygin in task 248404 March 24, 2020 Anton Farygin - 7.3.16 Fixes: CVE-2020-7064, CVE-2020-7065, CVE-2020-7066...

CVE-2020-10557: Unrestricted Upload of File with Dangerous Type

An issue was discovered in AContent through 1.4. It allows the user to run commands on the server with a low-privileged account. The upload section in the file manager page contains an arbitrary file upload vulnerability via upload.php. The extension .php7 bypasses file upload restrictions...

openSUSE Security Update : php7 (openSUSE-2020-341)

This update for php7 fixes the following issues : - CVE-2020-7062: Fixed a NULL pointer dereference when using file upload functionality under specific circumstances bsc1165280. - CVE-2020-7063: Fixed an issue where adding files change the permissions to default bsc1165289. - CVE-2020-7059: Fixed...