php php 3.0.5 vulnerabilities and exploits

(subscribe to this query)

PHP3 with safe_mode enabled does not properly filter shell metacharacters from commands that are executed by popen, which could allow remote malicious users to execute commands.

Php Php 3.0 Php Php 3.0.1 Php Php 3.0.2 Php Php 3.0.3 Php Php 3.0.4 Php Php 3.0.5 Php Php 3.0.6 Php Php 3.0.7 Php Php 3.0.8 Php Php 3.0.9 Php Php 3.0.10 Php Php 3.0.11

1 EDB exploit

matyhtf framework v3.0.5 is affected by a path manipulation vulnerability in Smarty.class.php.

Swoole Swoole Php Framework 3.0.5

The file upload capability in PHP versions 3 and 4 allows remote malicious users to read arbitrary files by setting hidden form fields whose names match the names of internal PHP script variables.

Php Php 1.0 Php Php 2.0 Php Php 2.0b10 Php Php 3.0 Php Php 3.0.1 Php Php 3.0.2 Php Php 3.0.3 Php Php 3.0.4 Php Php 3.0.5 Php Php 3.0.6 Php Php 3.0.7 Php Php 3.0.8

Safe Mode feature (safe_mode) in PHP 3.0 up to and including 4.1.0 allows attackers with access to the MySQL database to bypass Safe Mode access restrictions and read arbitrary files using "LOAD DATA INFILE LOCAL" SQL statements.

Php Php 3.0 Php Php 3.0.1 Php Php 3.0.2 Php Php 3.0.3 Php Php 3.0.4 Php Php 3.0.5 Php Php 3.0.6 Php Php 3.0.7 Php Php 3.0.8 Php Php 3.0.9 Php Php 3.0.10 Php Php 3.0.11

3 EDB exploits

move_uploaded_file in PHP does not does not check for the base directory (open_basedir), which could allow remote malicious users to upload files to unintended locations on the system.

Php Php 3.0 Php Php 3.0.1 Php Php 3.0.2 Php Php 3.0.3 Php Php 3.0.4 Php Php 3.0.5 Php Php 3.0.6 Php Php 3.0.7 Php Php 3.0.8 Php Php 3.0.9 Php Php 3.0.10 Php Php 3.0.11

1 EDB exploit

php.exe in PHP 3.0 up to and including 4.2.2, when running on Apache, does not terminate properly, which allows remote malicious users to cause a denial of service via a direct request without arguments.

Php Php 3.0.1 Php Php 3.0.2 Php Php 3.0.3 Php Php 3.0.4 Php Php 3.0.5 Php Php 3.0.6 Php Php 3.0.7 Php Php 3.0.8 Php Php 3.0.9 Php Php 3.0.10 Php Php 3.0.11 Php Php 3.0.12

1 EDB exploit

The imap_header function in the IMAP functionality for PHP prior to 4.3.0 allows remote malicious users to cause a denial of service via an e-mail message with a large number of "To" addresses, which triggers an error in the rfc822_write_address function.

Php Php Php Php 3.0 Php Php 3.0.1 Php Php 3.0.2 Php Php 3.0.3 Php Php 3.0.4 Php Php 3.0.5 Php Php 3.0.6 Php Php 3.0.7 Php Php 3.0.8 Php Php 3.0.9 Php Php 3.0.10

Multiple vulnerabilities in PHP prior to 4.4.1 allow remote malicious users to bypass safe_mode and open_basedir restrictions via unknown attack vectors in (1) ext/curl and (2) ext/gd.

Php Php 3.0 Php Php 3.0.1 Php Php 3.0.2 Php Php 3.0.3 Php Php 3.0.4 Php Php 3.0.5 Php Php 3.0.6 Php Php 3.0.7 Php Php 3.0.8 Php Php 3.0.9 Php Php 3.0.10 Php Php 3.0.11

Unspecified vulnerability in PHP prior to 4.4.1, when using the virtual function on Apache 2, allows remote malicious users to bypass safe_mode and open_basedir directives.

Php Php 3.0 Php Php 3.0.1 Php Php 3.0.2 Php Php 3.0.3 Php Php 3.0.4 Php Php 3.0.5 Php Php 3.0.6 Php Php 3.0.7 Php Php 3.0.8 Php Php 3.0.9 Php Php 3.0.10 Php Php 3.0.11

The tempnam function in ext/standard/file.c in PHP prior to 5.2.12 and 5.3.x prior to 5.3.1 allows context-dependent malicious users to bypass safe_mode restrictions, and create files in group-writable or world-writable directories, via the dir and prefix arguments.

Php Php Php Php 1.0 Php Php 2.0 Php Php 2.0b10 Php Php 3.0 Php Php 3.0.1 Php Php 3.0.2 Php Php 3.0.3 Php Php 3.0.4 Php Php 3.0.5 Php Php 3.0.6 Php Php 3.0.7

1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook