30 matches found
phpfastcache - phpinfo Resource Exposure
phpinfo is susceptible to resource exposure in unprotected composer vendor folders via phpfastcache/phpfastcache. id: CVE-2021-37704 info: name: phpfastcache - phpinfo Resource Exposure author: whoever severity: medium description: phpinfo is susceptible to resource exposure in unprotected compos...
phpfastcache - phpinfo Resource Exposure Detection
phpinfo is susceptible to resource exposure in unprotected composer vendor folders via phpfastcache/phpfastcache. !/usr/bin/env python3 -- coding: utf-8 -- """phpinfo is susceptible to resource exposure in unprotected composer vendor folders via phpfastcache/phpfastc.""" from kittysploit import...
CVE-2019-16774
In phpfastcache before 5.1.3, there is a possible object injection vulnerability in cookie driver...
EUVD-2019-0775
Malware in sbrugna...
CVE-2021-37704
PhpFastCache is a high-performance backend cache system packagist package phpfastcache/phpfastcache. In versions before 6.1.5, 7.1.2, and 8.0.7 the phpinfo can be exposed if the /vendor is not protected from public access. This is a rare situation today since the vendor directory is often located...
Information Disclosure
phpfastcache is vulnerable to information disclosure. The vulnerability exists due to the exposure of phpinfo when the /vendor is not protected from public access...
CVE-2021-37704
PhpFastCache is a high-performance backend cache system packagist package phpfastcache/phpfastcache. In versions before 6.1.5, 7.1.2, and 8.0.7 the phpinfo can be exposed if the /vendor is not protected from public access. This is a rare situation today since the vendor directory is often located...
CVE-2021-37704
PhpFastCache is a high-performance backend cache system packagist package phpfastcache/phpfastcache. In versions before 6.1.5, 7.1.2, and 8.0.7 the phpinfo can be exposed if the /vendor is not protected from public access. This is a rare situation today since the vendor directory is often located...
CVE-2021-37704
PhpFastCache is a high-performance backend cache system packagist package phpfastcache/phpfastcache. In versions before 6.1.5, 7.1.2, and 8.0.7 the phpinfo can be exposed if the /vendor is not protected from public access. This is a rare situation today since the vendor directory is often located...
Design/Logic Flaw
PhpFastCache is a high-performance backend cache system packagist package phpfastcache/phpfastcache. In versions before 6.1.5, 7.1.2, and 8.0.7 the phpinfo can be exposed if the /vendor is not protected from public access. This is a rare situation today since the vendor directory is often located...
CVE-2021-37704
PhpFastCache is a high-performance backend cache system packagist package phpfastcache/phpfastcache. In versions before 6.1.5, 7.1.2, and 8.0.7 the phpinfo can be exposed if the /vendor is not protected from public access. This is a rare situation today since the vendor directory is often located...
CVE-2021-37704
CVE-2021-37704 affects PhpFastCache when the composer/vendor directory is not protected. The issue allows exposure of the phpinfo() page in unprotected /vendor, applicable to PHPFastCache versions prior to 6.1.5, 7.1.2, and 8.0.7. Patched releases are 6.1.5+ (for v6), 7.1.2+ (for v7), and 8.0.7+ ...
CVE-2021-37704 Exposed phpinfo() in PhpFastCache
PhpFastCache is a high-performance backend cache system packagist package phpfastcache/phpfastcache. In versions before 6.1.5, 7.1.2, and 8.0.7 the phpinfo can be exposed if the /vendor is not protected from public access. This is a rare situation today since the vendor directory is often located...
CVE-2021-37704: Exposure of Sensitive Information to an Unauthorized Actor
PhpFastCache is a high-performance backend cache system packagist package phpfastcache/phpfastcache. In versions before 6.1.5, 7.1.2, and 8.0.7 the phpinfo can be exposed if the /vendor is not protected from public access. This is a rare situation today since the vendor directory is often located...
phpfastcache information leakage vulnerability
phpfastcache is a back-end caching system. An information disclosure vulnerability exists in PhpFastCache, which stems from the software's lack of effective access protection for the "vendor" directory, allowing an attacker to access "phpinfo"...
PT-2021-21823 · Unknown · Phpfastcache
Name of the Vulnerable Software and Affected Versions: PhpFastCache versions prior to 6.1.5 PhpFastCache versions prior to 7.1.2 PhpFastCache versions prior to 8.0.7 Description: The issue concerns the exposure of phpinfo when the /vendor directory is not protected from public access. This...
PhpFastCache Deserialization DoS
The vulnerability of the PhpFastCache PHP library is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...
Object Injection
phpsocialnetwork/phpfastcache is vulnerable to object injection. The vulnerability exists as an object can be included through the value of $keyword in Cookie/Driver.php, potentially allowing an attacker to execute arbtirary code...
phpfastcache cookie driver code injection vulnerability
phpfastcache is a back-end caching system. A code injection vulnerability exists in the cookie driver in versions of phpfastcache prior to 5.1.3. The vulnerability stems from a network system or product not properly filtering special elements of externally entered data during the construction of ...