265 matches found
GLSA-200512-09 : cURL: Off-by-one errors in URL handling
The remote host is affected by the vulnerability described in GLSA-200512-09 cURL: Off-by-one errors in URL handling Stefan Esser from the Hardened-PHP Project has reported a vulnerability in cURL that allows for a local buffer overflow when cURL attempts to parse specially crafted URLs. The URL...
PHP: Multiple vulnerabilities
Background PHP is a general-purpose scripting language widely used to develop web-based applications. It can run inside a web server using the modphp module or the CGI version and also stand-alone in a CLI. Description Multiple vulnerabilities have been found and fixed in PHP: a possible $GLOBALS...
CVE-2005-3391
Multiple vulnerabilities in PHP before 4.4.1 allow remote attackers to bypass safemode and openbasedir restrictions via unknown attack vectors in 1 ext/curl and 2 ext/gd...
CVE-2005-3392
Unspecified vulnerability in PHP before 4.4.1, when using the virtual function on Apache 2, allows remote attackers to bypass safemode and openbasedir directives...
EUVD-2005-3390
Multiple vulnerabilities in PHP before 4.4.1 allow remote attackers to bypass safemode and openbasedir restrictions via unknown attack vectors in 1 ext/curl and 2 ext/gd...
CVE-2005-3391
CVE-2005-3391 affects PHP before 4.4.1, with multiple vulnerabilities in ext/curl and ext/gd that allow remote attackers to bypass safe_mode and open_basedir restrictions via unknown attack vectors. The provided documents do not include concrete patch versions or remediation steps for this CVE; e...
CVE-2005-3392
Technical details for CVE-2005-3392 are not provided in the supplied connected documents; no product/version/impact data is available here. Monitor for official updates from vendors and advisories.
php.4.4.1.txt
Hello, Here under some stuff to dos apache + php just through an htaccess. With .htaccess method : If you have into your php.ini - safemode = On Simply put a .htaccess file on the root directory of your website with this content : phpvalue session.savepath /var/www/somewherehowexist Apache segfau...
GLSA-200412-19 : phpMyAdmin: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200412-19 phpMyAdmin: Multiple vulnerabilities Nicolas Gregoire exaprobe.com has discovered two vulnerabilities that exist only on a webserver where PHP safemode is off. These vulnerabilities could lead to command execution or fil...
phpMyAdmin: Multiple vulnerabilities
Background phpMyAdmin is a tool written in PHP intended to handle the administration of MySQL databases from a web-browser. Description Nicolas Gregoire exaprobe.com has discovered two vulnerabilities that exist only on a webserver where PHP safemode is off. These vulnerabilities could lead to...
CVE-2002-0462
bigsamguestbook.php for Big Sam Built-In Guestbook Stand-Alone Module 1.1.08 and earlier allows remote attackers to cause a denial of service CPU consumption or obtain the absolute path of the web server via a displayBegin parameter with a very large number, which leaks the web path in an error...
CVE-2002-0462
CVE-2002-0462 affects bigsam_guestbook.php (Big Sam Built-In Guestbook Stand-Alone Module) version 1.1.08 and earlier. The vulnerability arises from a displayBegin parameter containing a very large number, which can cause denial of service via CPU consumption or leak the web server’s absolute pat...
[SECURITY] [DSA 168-1] New PHP packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 168-1 [email protected] http://www.debian.org/security/ Martin Schulze September 18th, 2002 http://www.debian.org/security/faq -...
PHP: Bypass safe_mode and inject ASCII control chars with mail()
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Product: PHP Version: 4.x up to 4.2.2 Vendor: http://www.php.net/ Author: Wojciech Purczynski [email protected] Date: June 13, 2002 Updated: August 23, 2002 Released: August 21, 2002 Issue: ====== Two vulnerabilities exists in mail PHP function. The first...
CVE-2002-0462
bigsamguestbook.php for Big Sam Built-In Guestbook Stand-Alone Module 1.1.08 and earlier allows remote attackers to cause a denial of service CPU consumption or obtain the absolute path of the web server via a displayBegin parameter with a very large number, which leaks the web path in an error...
move_uploaded_file breaks safe_mode restrictions in PHP
Hey Its possible to circumvent probadly spelled wrong PHP safemode restrictions by using moveuploadedfile. You take this nasty script and you have domain whatever.com and your directory path is /domains/whatever.com/ ? $file = $HTTPPOSTFILES'file''name'; $type = $HTTPPOSTFILES'file''type'; $size ...
PHP 4.x5.x MySQL Library - Safe_mode Filesystem Circumvention (1)
PHP 4.x5.x MySQL Library - Safemode Filesystem Circumvention 1 ?php / source: https://www.securityfocus.com/bid/4026/info PHP's 'safemode' feature may be used to restrict access to certain areas of a filesystem by PHP scripts. However, a problem has been discovered that may allow an attacker to...
PHP 4.x/5.x MySQL Library - 'Safe_mode' Filesystem Circumvention (1)
?php / source: https://www.securityfocus.com/bid/4026/info PHP's 'safemode' feature may be used to restrict access to certain areas of a filesystem by PHP scripts. However, a problem has been discovered that may allow an attacker to bypass these restrictions to gain unauthorized access to areas o...
PHP 4.x5.x MySQL Library - Safe_mode Filesystem Circumvention (3)
PHP 4.x5.x MySQL Library - Safemode Filesystem Circumvention 3 optionsMYSQLIOPTLOCALINFILE, 1; $m-setlocalinfilehandler"r"; $m-query"LOAD DATA LOCAL INFILE '/etc/passwd' INTO TABLE a.a"; $m-close; ?...