838 matches found
PHP 'FFI' Extension 5.0.5 - 'Safe_mode' Local Bypass
WinExec"cmd.exe /c $command "$...
PHP Win32Service扩展Safe_Mode限制绕过漏洞
PHP是一款广泛使用的WEB开发脚本语言。 PHP Win32Service扩展存在'safemode'限制绕过问题，远程攻击者可以利用漏洞绕过安全限制，执行受限PHP代码。 在共享主机的配置下，多个用户可以建立和执行任意PHP脚本代码受此漏洞影响。攻击者可以构建恶意WEB页，绕过'safemode'的用户隔离限制，以WEB权限执行受限代码。 PHP PHP 5.2.1 + Ubuntu Ubuntu Linux 7.04 sparc + Ubuntu Ubuntu Linux 7.04 powerpc + Ubuntu Ubuntu Linux 7.04 i386 + Ubuntu...
CVE-2007-4147
Interspire ArticleLive NX prior to 1.7.1.2 is affected by multiple unspecified vulnerabilities with unknown impact and attack vectors. The connected sources mention potential issues related to AL_SANITIZE and a constructor-related check mechanism, but no concrete exploit details, affected file/en...
PHP 5.x (win32service) Local Safe Mode Bypass Exploit
No description provided by source. ?php PHP Safemode bypass exploit win32service Note: Tested on 5.2.1 Author: NetJackal Email: nima501atyahoodotcom Website: http://netjackal.by.ru ...
PHP win32service extension protection bypass
Service management functions ara available from safe mode...
PHP 5.x (win32service) Local Safe Mode Bypass Exploit
Exploit for unknown platform in category local exploits ===================================================== PHP 5.x win32service Local Safe Mode Bypass Exploit ===================================================== $n,'display'=$n,'path'=$cmd,'params'="/c $command "$name""; win32startservice$n;...
PHP 5.2.3 Win32std - win_shell_execute Safe Mode Disable Functions Bypass
PHP 5.2.3 Win32std - winshellexecute Safe Mode Disable Functions Bypass milw0rm.com 2007-07-24...
PHP 5.2.3 Win32std - win_shell_execute Safe Mode disable_functions Bypass
PHP 5.2.3 Win32std - winshellexecute Safe Mode disablefunctions Bypass milw0rm.com 2007-07-24...
PHP 5.2.3 Win32std - 'win_shell_execute' Safe Mode / disable_functions Bypass
milw0rm.com 2007-07-24...
MPack with virtual hosting and PHP security-vulnerability warning-the black bar safety net
MPack is by a self-proclaimed "Dream Coders Team" of the organization development of the PHP program, which contain a number of the latest exploit code can be used to manipulate the distal end of attacks on Panda Labs at the end of last year when for the first time found that, at the time someone...
CVE-2007-3378
The 1 sessionsavepath, 2 iniset, and 3 errorlog functions in PHP 4.4.7 and earlier, and PHP 5 5.2.3 and earlier, when invoked from a .htaccess file, allow remote attackers to bypass safemode and openbasedir restrictions and possibly execute arbitrary commands, as demonstrated using a phpvalue, b...
PHP < 5.2.1 Multiple Vulnerabilities
According to its banner, the version of PHP installed on the remote host is older than 5.2.1. Such versions may be affected by several issues, including buffer overflows, format string vulnerabilities, arbitrary code execution, 'safemode' and 'openbasedir' bypasses, and clobbering of super-global...
PHP read_file safe_mode protection bypass
It's possible to bypass protection by using php://../../ prefix to filename...
readfile() Safe Mode Bypass PHP 5.2.1/ 5.1.6 / 4.4.4
SecurityRisk : DEN Remote Exploit : No Local Exploit : Yes Exploit Given : Yes Credit : The-WolF-kSA Date : 24.3.2007 Affected Software : PHP 5.2.1/ 5.1.6 / 4.4.4 readfile Safe Mode Bypass PHP 5.2.1/ 5.1.6 / 4.4.4 Author: ThE-WoLf-KsA Date: - -Written: 24.3.2007 - --- 0.Description --- - --- 1...
Design/Logic Flaw
The readfile function in PHP 4.4.4, 5.1.6, and 5.2.1 allows context-dependent attackers to bypass safemode restrictions and read arbitrary files by referring to local files with a certain URL syntax instead of a pathname syntax, as demonstrated by a filename preceded a "php://../../" sequence...
CVE-2007-1710
The readfile function in PHP 4.4.4, 5.1.6, and 5.2.1 allows context-dependent attackers to bypass safemode restrictions and read arbitrary files by referring to local files with a certain URL syntax instead of a pathname syntax, as demonstrated by a filename preceded a "php://../../" sequence...
CVE-2007-1710
The readfile function in PHP 4.4.4, 5.1.6, and 5.2.1 allows context-dependent attackers to bypass safemode restrictions and read arbitrary files by referring to local files with a certain URL syntax instead of a pathname syntax, as demonstrated by a filename preceded a "php://../../" sequence...
CVE-2007-1710
The CVE-2007-1710 issue affects PHP’s readfile function in versions 4.4.4, 5.1.6, and 5.2.1, where an attacker can bypass safe_mode and read arbitrary local files by using a php://… URL syntax (e.g., php://../../…). This is a local-privilege-context vulnerability enabling partial disclosure of in...
CVE-2007-1710
The readfile function in PHP 4.4.4, 5.1.6, and 5.2.1 allows context-dependent attackers to bypass safemode restrictions and read arbitrary files by referring to local files with a certain URL syntax instead of a pathname syntax, as demonstrated by a filename preceded a "php://../../" sequence...
php-readfile.txt
SecurityRisk : DEN Remote Exploit : No Local Exploit : Yes Exploit Given : Yes Credit : The-WolF-kSA Date : 24.3.2007 Affected Software : PHP 5.2.1/ 5.1.6 / 4.4.4 readfile Safe Mode Bypass PHP 5.2.1/ 5.1.6 / 4.4.4 Author: ThE-WoLf-KsA Date: - -Written: 24.3.2007 - --- 0.Description --- - --- 1...