929 matches found
MOPS-2010-015: PHP ZEND_SL Opcode Interruption Address Information Leak Vulnerability
MOPS-2010-015: PHP ZENDSL Opcode Interruption Address Information Leak Vulnerability May 8th, 2010 PHP’s ZENDSL opcode can be abused for address information leak attacks by an userspace error handler interruption attack. Affected versions Affected is PHP 5.2 = 5.2.13 Affected is PHP 5.3 = 5.3.2...
MOPS-2010-009: PHP shm_put_var() Already Freed Resource Access Vulnerability
MOPS-2010-009: PHP shmputvar Already Freed Resource Access Vulnerability May 5th, 2010 When PHP’s shmputvar function is interrupted by an object’s sleep function it can destroy the shm resource used by this function which allows to write an arbitrary memory address. Affected versions Affected is...
MOPS-2010-014: PHP ZEND_BW_XOR Opcode Interruption Address Information Leak Vulnerability
MOPS-2010-014: PHP ZENDBWXOR Opcode Interruption Address Information Leak Vulnerability May 8th, 2010 PHP’s ZENDBWXOR opcode can be abused for address information leak attacks by an userspace error handler interruption attack. Affected versions Affected is PHP 5.2 = 5.2.13 Affected is PHP 5.3 =...
FreeBSD : Zend Framework -- security issues in bundled Dojo library (8ad1c404-3e78-11df-a5a1-0050568452ac)
The Zend Framework team reports : Several files in the bundled Dojo library were identified as having potential exploits, and the Dojo team also advised disabling or removing any PHP scripts in the Dojo library tree when deploying to production. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
Zend Framework -- security issues in bundled Dojo library
The Zend Framework team reports: Several files in the bundled Dojo library were identified as having potential exploits, and the Dojo team also advised disabling or removing any PHP scripts in the Dojo library tree when deploying to production...
Fedora Update for php-ZendFramework FEDORA-2010-0652
Check for the Version of php-ZendFramework OpenVAS Vulnerability Test Fedora Update for php-ZendFramework FEDORA-2010-0652 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...
CityShop v5. 5. 8 sql injection 0day&background get the webshell method-vulnerability warning-the black bar safety net
Text/My5t3ry Saw yesterday on the Forum a friend asked CitySHOP background how to get a SHELL, just under the source code back to read the next, find the code with the zend encryption. The decryption after the reading, the vulnerability also really many, many parameters are$GET straight into the...
[SECURITY] Fedora 12 Update: php-ZendFramework-1.9.7-1.fc12
Extending the art & spirit of PHP, Zend Framework is based on simplicity, object-oriented best practices, corporate friendly licensing, and a rigorou sly tested agile codebase. Zend Framework is focused on building more secure, reliable, and modern Web 2.0 applications & web services, and consumi...
[SECURITY] Fedora 11 Update: php-ZendFramework-1.9.7-1.fc11
Extending the art & spirit of PHP, Zend Framework is based on simplicity, object-oriented best practices, corporate friendly licensing, and a rigorou sly tested agile codebase. Zend Framework is focused on building more secure, reliable, and modern Web 2.0 applications & web services, and consumi...
Zend Framework 1.9.6 - Multiple Input Validation Vulnerabilities Security Bypass
Zend Framework 1.9.6 - Multiple Input Validation Vulnerabilities Security Bypass source: https://www.securityfocus.com/bid/37809/info Zend Framework is prone to multiple input-validation vulnerabilities and a weakness: - Multiple cross-site scripting issues - An HTML-injection issue - A...
FreeBSD : Zend Framework -- multiple vulnerabilities (c9263916-006f-11df-94cb-0050568452ac)
The Zend Framework team reports : Potential XSS or HTML Injection vector in ZendJson. Potential XSS vector in ZendServiceReCaptchaMailHide. Potential MIME-type Injection in ZendFileTransfer Executive Summary. Potential XSS vector in ZendFilterStripTags when comments allowed. Potential XSS vector ...
Zend Framework 1.9.6 - Multiple Input Validation Vulnerabilities / Security Bypass
source: https://www.securityfocus.com/bid/37809/info Zend Framework is prone to multiple input-validation vulnerabilities and a weakness: - Multiple cross-site scripting issues - An HTML-injection issue - A security-bypass weakness An attacker may leverage the cross-site scripting issues and...
Potential XSS vector in Zend_Service_ReCaptcha_MailHide
More info at https://framework.zend.com/security/advisory/ZF2010-05...
Potential Security Issues in Bundled Dojo Library
More info at https://framework.zend.com/security/advisory/ZF2010-06...
php 5.1.2 zend-hash.c 安全模式绕过
No description provided by source...
Design/Logic Flaw
The shutdown function in the ZendLogWriterMail class in Zend Framework ZF allows context-dependent attackers to send arbitrary e-mail messages to any recipient address via vectors related to "events not yet mailed."...
CVE-2009-4417
The shutdown function in the ZendLogWriterMail class in Zend Framework ZF allows context-dependent attackers to send arbitrary e-mail messages to any recipient address via vectors related to "events not yet mailed."...
Code injection
The loadContentFromCookie function in core/Cookie.php in Piwik before 0.5 does not validate strings obtained from cookies before calling the unserialize function, which allows remote attackers to execute arbitrary code or upload arbitrary files via vectors related to the destruct function in the...