87 matches found
CVE-2012-2311: Improper Neutralization of Special Elements used in an SQL Command
sapi/cgi/cgimain.c in PHP before 5.3.13 and 5.4.x before 5.4.3, when configured as a CGI script aka php-cgi, does not properly handle query strings that contain a %3D sequence but no = equals sign character, which allows remote attackers to execute arbitrary code by placing command-line options i...
CVE-2012-2329: Improper Restriction of Operations within the Bounds of a Memory Buffer
Buffer overflow in the apacherequestheaders function in sapi/cgi/cgimain.c in PHP 5.4.x before 5.4.3 allows remote attackers to cause a denial of service application crash via a long string in the header of an HTTP request...
PHP 5.2.x Remote Code Execution Vulnerability
Release Date: 17 February 2012 Affected Versions: 5.2.0 - 5.2.17 unsupported version ------------------------------------------------------------------------------------------ Description: If PHP bails out in startup stage before setting PGmodulesactivated to 1, the filterglobals struct is not...
CVE-2012-0831: Improper Input Validation
PHP before 5.3.10 does not properly perform a temporary change to the magicquotesgpc directive during the importing of environment variables, which makes it easier for remote attackers to conduct SQL injection attacks via a crafted request, related to main/phpvariables.c, sapi/cgi/cgimain.c, and...
PHP <5.2.7 SAPI php_getuid() Safe Mode 限制绕过漏洞
No description provided by source...
PHP 5.3 < 5.3.6 String To Double Conversion DoS
Binary data 801082.prm...
Mandriva Linux Security Advisory : php (MDVSA-2010:254)
This is a maintenance and security update that upgrades php to 5.3.4 for 2010.0/2010.1. Security Enhancements and Fixes in PHP 5.3.4 : - Paths with NULL in them foo\0bar.txt are now considered as invalid CVE-2006-7243. - Fixed bug 53512 NumberFormatter::setSymbol crash on bogus values CVE-2010-44...
MDVA-2009:193 : php
This is a bugfix and maintenance release for php that upgrades php to 5.3.1RC3 and fixes some bugs: - fix 54993 - With latest php-5.3.xx, it's not needed to build a separate binary for FastCGI SAPI support, this is always enabled in the php-cgi binary. This obsoletes the php-fcgi package and also...
Mandriva Update for php MDVA-2010:163 (php)
Check for the Version of php OpenVAS Vulnerability Test Mandriva Update for php MDVA-2010:163 php Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...
Mandriva Update for php MDVA-2010:163 (php)
Check for the Version of php OpenVAS Vulnerability Test Mandriva Update for php MDVA-2010:163 php Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...
MDVA-2010:163 : php
This is a maintenance update that upgrades php to the latest upstream versions for CS4/MES5/2008.0/2009.0/2009.1/2010.0. Additionally some of the third party extensions and required dependencies has been upgraded. Corporate Server 4.0 with php-5.1.6 had the old Hardening-Patch 0.4.14 applied...
Design/Logic Flaw
PHP 5 before 5.2.7 does not properly initialize the pageuid and pagegid global variables for use by the SAPI phpgetuid function, which allows context-dependent attackers to bypass safemode restrictions via variable settings that are intended to be restricted to root, as demonstrated by a setting ...
CVE-2008-5624
PHP 5 before 5.2.7 does not properly initialize the pageuid and pagegid global variables for use by the SAPI phpgetuid function, which allows context-dependent attackers to bypass safemode restrictions via variable settings that are intended to be restricted to root, as demonstrated by a setting ...
PHP SAPI 'php_getuid()' 安全模式绕过漏洞
PHP is prone to a 'safemode' restriction-bypass vulnerability. Successful exploits could allow an attacker to bypass some safe mode restrictions. This vulnerability would be an issue in shared-hosting configurations where multiple users can create and execute arbitrary PHP script code, with the...
Ubuntu 6.06 LTS / 7.04 / 7.10 / 8.04 LTS : php5 vulnerabilities (USN-628-1)
It was discovered that PHP did not properly check the length of the string parameter to the fnmatch function. An attacker could cause a denial of service in the PHP interpreter if a script passed untrusted input to the fnmatch function. CVE-2007-4782 Maksymilian Arciemowicz discovered a flaw in t...
SuSE 10 Security Update : PHP5 (ZYPP Patch Number 5345)
This version upgrade php5 to 5.2.6 fixes several security vulnerabilities. - Fixed possible stack-based buffer overflow in the FastCGI SAPI identified by Andrei Nigmatulin. - Fixed integer overflow in printf identified by Maksymilian Aciemowicz. - Fixed security issue detailed in CVE-2008-0599...
Debian Security Advisory DSA 1572-1 (php5)
The remote host is missing an update to php5 announced via advisory DSA 1572-1. OpenVAS Vulnerability Test $Id: deb15721.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1572-1 php5 Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
Debian DSA-1572-1 : php5 - several vulnerabilities
Several vulnerabilities have been discovered in PHP, a server-side, HTML-embedded scripting language. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-3806 The glob function allows context-dependent attackers to cause a denial of service and possibly...
