Lucene search
+L

45 matches found

Prion
Prion
•added 2007/08/29 1:17 a.m.•32 views

Buffer overflow

Multiple buffer overflows in phpiisfunc.dll in the iisfunc extension for PHP 5.2.0 and earlier allow context-dependent attackers to execute arbitrary code, probably during Unicode conversion, as demonstrated by a long string in the first argument to the iisgetservicestate function, related to the...

7.5CVSS7.8AI score0.09446EPSS
SaveExploits1References3Affected Software1
NVD
NVD
•added 2007/08/29 1:17 a.m.•39 views

CVE-2007-4586

Multiple buffer overflows in phpiisfunc.dll in the iisfunc extension for PHP 5.2.0 and earlier allow context-dependent attackers to execute arbitrary code, probably during Unicode conversion, as demonstrated by a long string in the first argument to the iisgetservicestate function, related to the...

7.5CVSS7.5AI score0.09446EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2005/11/04 12:00 a.m.•34 views

CVE-2005-3497

SQL injection vulnerability in processsignup.php in PHP Handicapper allows remote attackers to execute arbitrary SQL commands via the serviceid parameter. NOTE: on 20060210, the vendor disputed this issue, saying "this is 100% false reporting, this is a slander campaign from a customer who had a...

8.2AI score0.01395EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2005/11/04 12:00 a.m.•12 views

PT-2005-4293 · Php · Php Handicapper

Name of the Vulnerable Software and Affected Versions: PHP Handicapper affected versions not specified Description: A SQL injection issue allows remote attackers to execute arbitrary SQL commands via the serviceid parameter in the process signup.php file. The vendor initially disputed this issue,...

7.5CVSS8.7AI score0.01395EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/11/04 12:00 a.m.•5 views

CVE-2005-3497: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in processsignup.php in PHP Handicapper allows remote attackers to execute arbitrary SQL commands via the serviceid parameter. NOTE: on 20060210, the vendor disputed this issue, saying "this is 100% false reporting, this is a slander campaign from a customer who had a...

7.5CVSS6.4AI score0.01395EPSS
SaveExploits0References2
Rows per page
Query Builder