pcc

PHP Secure Configuration Checker Check current PHP configuration for potential security flaws. Simply access this file from your webserver or run on CLI. Author This software was written by Ben Fuhrmannek, SektionEins GmbH, in an effort to automate php.ini checks and spend more time on cheerful...

EUVD-2011-3745

Malware in sbrugna...

CVE-2011-3788

PhpSecInfo 0.2.1 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by Test/TestSuhosin.php and certain other files...

CVE-2011-3788

PhpSecInfo 0.2.1 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by Test/TestSuhosin.php and certain other files...

Information disclosure

PhpSecInfo 0.2.1 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by Test/TestSuhosin.php and certain other files...

PT-2011-4678

Name of the Vulnerable Software and Affected Versions PhpSecInfo version 0.2.1 Description The issue allows remote attackers to obtain sensitive information via a direct request to a .php file. This is achieved by exploiting the fact that certain files, such as Test/Test Suhosin.php, reveal the...

CVE-2011-3788

PhpSecInfo 0.2.1 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by Test/TestSuhosin.php and certain other files...

CVE-2011-3788: Exposure of Sensitive Information to an Unauthorized Actor

PhpSecInfo 0.2.1 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by Test/TestSuhosin.php and certain other files...

CVE-2011-3788

CVE-2011-3788 : ThePhpSecInfo 0.2.1 package allows remote disclosure of installation paths via a direct request to a .php file, exposing information in an error message (as shown by Test/Test_Suhosin.php and related files). No exploit/vector details or mitigation are provided in the connected doc...