865 matches found
Mandriva Linux Security Advisory : php (MDVSA-2009:302)
Some vulnerabilities were discovered and corrected in php-5.3.1 : - Added maxfileuploads INI directive, which can be set to limit the number of file uploads per-request to 20 by default, to prevent possible DOS via temporary file exhaustion. Ilia - Added missing sanity checks around exif...
Foxit Launches 'Safe Mode' to Counter PDF Attacks
Foxit Corp has added new security features to its alternative PDF reader software to help thwart recent malware attacks that exploit the “/launch” feature. With Foxit PDF Reader Version 3.3, the company has added a Safe Mode that blocks external commands from being executed by the software. The...
Crack McAfee password-vulnerability warning-the black bar safety net
Just into the company took over the work, the company installed the McAfee software, the C disk is protected, and want to install the software are difficult to Ah, that bird did not say the password, which is difficult for yourself. Want to remove software delete No, I want to install the also...
Design/Logic Flaw
The safemode implementation in PHP before 5.2.13 does not properly handle directory pathnames that lack a trailing / slash character, which allows context-dependent attackers to bypass intended access restrictions via vectors related to use of the tempnam function...
CVE-2010-1129
The safemode implementation in PHP before 5.2.13 does not properly handle directory pathnames that lack a trailing / slash character, which allows context-dependent attackers to bypass intended access restrictions via vectors related to use of the tempnam function...
Kolang (proc_open PHP safe mode bypass 4.3.10 - 5.3.0)
No description provided by source. ?php / Kolang PHP Safe mode bypass IHSteam priv8 for lazy penetration testers php 4.3.10 - 5.3.0 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2009-4018 12/19/2009 http://www.milw0rm.com/exploits/7393 12/09/2008 1- Kolang can be used directly in file...
Kolang (proc_open PHP safe mode bypass 4.3.10 - 5.3.0)
Exploit for unknown platform in category web applications ====================================================== Kolang procopen PHP safe mode bypass 4.3.10 - 5.3.0 ====================================================== ?php / Kolang PHP Safe mode bypass IHSteam priv8 for lazy penetration testers...
Kolang 4.3.10 5.3.0 - proc_open() PHP safe_mode Bypass
Kolang 4.3.10 5.3.0 - procopen PHP safemode Bypass // "shellcode loader" : load and execute arbitrary shellcode from a file // Hami...
Kolang 4.3.10 < 5.3.0 - 'proc_open()' PHP 'safe_mode' Bypass
// "shellcode loader" : load and execute arbitrary shellcode from a file // Hamid Ebadi define ORDONLY 00 ; fcntl.h define...
PHP tempnam()函数safe_mode验证绕过安全限制漏洞
BUGTRAQ ID: 38431 PHP是广泛使用的通用目的脚本语言，特别适合于Web开发，可嵌入到HTML中。 当目录路径没有以“/”结束时PHP的tempnam函数中没有正确的执行safemode验证，攻击者可以绕过安全限制获得对目录的读写访问。 PHP PHP 5.3.x PHP PHP 5.2.x 厂商补丁： PHP --- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://svn.php.net/viewvc/php/php-src/branches/PHP53/ext/session/session.c?view=log...
PHP session_save_path()绕过safe_mode和open_basedir限制漏洞
BUGTRAQ ID: 38182 PHP是广泛使用的通用目的脚本语言，特别适合于Web开发，可嵌入到HTML中。 用户可通过iniset和sessionsavepath函数来设置session.savepath。在 session.savepath中应存在一个用户保存用户tmp文件的路径，但session.savepath的句法为： /PATH 或 N;/PATH N可以为字符串（应为数字） 例如： 1. sessionsavepath"/DIR/WHERE/YOU/HAVE/ACCESS" 2. sessionsavepath"5;/DIR/WHERE/YOU/HAVE/ACCESS...
PHP < 5.2.13 Multiple Vulnerabilities
PHP is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:php:php"; ifdescription...
PHP 5.2.12 / 5.3.1 safe_mode / open_basedir Bypass
PHP 5.2.12/5.3.1 session.savepath safemode and openbasedir bypass Credit: Grzegorz Stachowiak Provided by: SecurityReason.com Date: - Written: 31.01.2010 - Public: 11.02.2010 SecurityRisk: Medium Affected Software: PHP 5.2.12 PHP 5.3.1 Advisory URL:...
PHP Remote File Inclusion
Added: 01/28/2010 Background PHP scripts support the include and require statements, which cause an outside script to be run within the calling script. The included script can be a local file or, in some configurations, the URL of a remote file. Problem The PHP script is vulnerable to a remote fi...
php 5.0.5 安全模式绕过
No description provided by source...
Immunity Canvas: PIWIK
Name| piwik ---|--- CVE| CVE-2009-4137 Exploit Pack| CANVAS Description| Piwik unserialize + destruct Notes| References: 'http://www.sektioneins.com/en/advisories/advisory-032009-piwik-cookie-unserialize-vulnerability/', 'http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2009-4137' Notes: This...
CVE-2009-4143
PHP before 5.2.12 does not properly handle session data, which has unspecified impact and attack vectors related to 1 interrupt corruption of the SESSION superglobal array and 2 the session.savepath directive...
PHP 5.2.x < 5.2.12 Multiple Vulnerabilities
Binary data 5281.prm...
PHP tempname()函数绕过safe_mode安全限制漏洞
BUGTRAQ ID: 36555 CVE ID: CVE-2009-3557 PHP是广泛使用的通用目的脚本语言，特别适合于Web开发，可嵌入到HTML中。 PHP的tempnam中的错误可能允许绕过safemode限制。以下是ext/standard/file.c中的有漏洞代码段： PHPFUNCTIONtempnam char dir, prefix; int dirlen, prefixlen; sizet plen; char openedpath; char p; int fd; if zendparseparametersZENDNUMARGS TSRMLSCC, "ss"...
PHP vulnerability full solution-vulnerability warning-the black bar safety net
PHP web page security issues For PHP website mainly exist the following types of attacks: 1. Command injectionCommand Injection 2. eval injectionEval Injection 3. Client scripting attacksScript Insertion 4. Cross-site scripting attacksCross Site Scripting, XSS 5. SQL injectionattacksSQL injection...