php php 4.4.5 vulnerabilities and exploits

(subscribe to this query)

Double free vulnerability in the unserializer in PHP 4.4.5 and 4.4.6 allows context-dependent malicious users to execute arbitrary code by overwriting variables pointing to (1) the GLOBALS array or (2) the session data in _SESSION. NOTE: this issue was introduced when attempting ...

Php Php 4.4.5 Php Php 4.4.6

1 EDB exploit

Integer overflow in the str_replace function in PHP 4.4.5 and PHP 5.2.1 allows context-dependent malicious users to have an unknown impact via a single character search string in conjunction with a single character replacement string, which causes an "off by one overflow.&qu...

Php Php 5.2.1 Php Php 4.4.5

A regression error in the phpinfo function in PHP 4.4.3 to 4.4.6, and PHP 6.0 in CVS, allows remote malicious users to conduct cross-site scripting (XSS) attacks via GET, POST, or COOKIE array values, which are not escaped in the phpinfo output, as originally fixed for CVE-2005-3...

Php Php 4.4.6 Php Php 6.0 Php Php 4.4.4 Php Php 4.4.5

1 EDB exploit

Buffer overflow in the imageloadfont function in ext/gd/gd.c in PHP 4.4.x prior to 4.4.9 and PHP 5.2 prior to 5.2.6-r6 allows context-dependent malicious users to cause a denial of service (crash) and possibly execute arbitrary code via a crafted font file.

Php Php 4.4.0 Php Php 4.4.1 Php Php 5.2.0 Php Php 5.2.1 Php Php 4.4.2 Php Php 4.4.3 Php Php 5.2.2 Php Php 5.2.3 Php Php 4.4.4 Php Php 4.4.5 Php Php 4.4.6 Php Php 5.2.4 Php Php 5.2.5 Php Php 4.4.7 Php Php 4.4.8 Php Php 5.2.6

Buffer overflow in the memnstr function in PHP 4.4.x prior to 4.4.9 and PHP 5.6 up to and including 5.2.6 allows context-dependent malicious users to cause a denial of service (crash) and possibly execute arbitrary code via the delimiter argument to the explode function. NOTE: th...

Php Php 4.4.0 Php Php 4.4.1 Php Php 4.4.8 Php Php 5.2.0 Php Php 4.4.2 Php Php 4.4.3 Php Php 5.2.1 Php Php 5.2.2 Php Php 5.2.3 Php Php 4.4.4 Php Php 4.4.5 Php Php 5.2.4 Php Php 5.2.5 Php Php 4.4.6 Php Php 4.4.7 Php Php 5.2.6

PHP 4.4.x prior to 4.4.9, and 5.x up to and including 5.2.6, when used as a FastCGI module, allows remote malicious users to cause a denial of service (crash) via a request with multiple dots preceding the extension, as demonstrated using foo..php.

Php Php 4.4.0 Php Php 4.4.1 Php Php 4.4.8 Php Php 5.2.0 Php Php 4.4.2 Php Php 4.4.3 Php Php 5.2.1 Php Php 5.2.2 Php Php 4.4.4 Php Php 4.4.5 Php Php 5.2.3 Php Php 5.2.4 Php Php 4.4.6 Php Php 4.4.7 Php Php 5.2.5 Php Php 5.2.6

PHP 4 prior to 4.4.5, and PHP 5 prior to 5.2.1, when register_globals is enabled, allows context-dependent malicious users to execute arbitrary code via deserialization of session data, which overwrites arbitrary global variables, as demonstrated by calling session_decode on a st...

1 EDB exploit

1 2 3 4 5 6 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook