MRW PHP shell upload vulnerability

Exploit for unknown platform in category web applications ================================== MRW PHP shell upload vulnerability ================================== Exploit Title: MRW PHP Upload Remote file upload Vulnerability Date: 12/02/2010 Author: Phenom Software Link:...

PHP: Memory disclosure and arbitrary location file upload

Background PHP is a general-purpose scripting language widely used to develop web-based applications. It can run inside a web server using the modphp module or the CGI version of PHP, or can run stand-alone in a CLI. Description Stefano Di Paola discovered two bugs in PHP. The first is a parse...

CVE-2002-0484

moveuploadedfile in PHP does not does not check for the base directory openbasedir, which could allow remote attackers to upload files to unintended locations on the system...