php php 4.4.3 vulnerabilities and exploits

(subscribe to this query)

CRLF injection vulnerability in the mail function in Dotdeb PHP prior to 5.2.0 Rev 3 allows remote malicious users to bypass the protection scheme and inject arbitrary email headers via CRLF sequences in the query string, which is processed via the PHP_SELF variable.

Dotdeb Dotdeb Php 4.4 Dotdeb Dotdeb Php 4.4.3 Dotdeb Dotdeb Php 4.4.4 Dotdeb Dotdeb Php 5.0 Dotdeb Dotdeb Php 5.1 Dotdeb Dotdeb Php 5.2

Buffer overflow in the imageloadfont function in ext/gd/gd.c in PHP 4.4.x prior to 4.4.9 and PHP 5.2 prior to 5.2.6-r6 allows context-dependent malicious users to cause a denial of service (crash) and possibly execute arbitrary code via a crafted font file.

Php Php 4.4.0 Php Php 4.4.1 Php Php 4.4.2 Php Php 4.4.3 Php Php 4.4.4 Php Php 4.4.5 Php Php 4.4.6 Php Php 4.4.7 Php Php 4.4.8 Php Php 5.2.0 Php Php 5.2.1 Php Php 5.2.2

Buffer overflow in the memnstr function in PHP 4.4.x prior to 4.4.9 and PHP 5.6 up to and including 5.2.6 allows context-dependent malicious users to cause a denial of service (crash) and possibly execute arbitrary code via the delimiter argument to the explode function. NOTE: th...

Php Php 4.4.0 Php Php 4.4.1 Php Php 4.4.2 Php Php 4.4.3 Php Php 4.4.4 Php Php 4.4.5 Php Php 4.4.6 Php Php 4.4.7 Php Php 4.4.8 Php Php 5.2.0 Php Php 5.2.1 Php Php 5.2.2

PHP 4.4.x prior to 4.4.9, and 5.x up to and including 5.2.6, when used as a FastCGI module, allows remote malicious users to cause a denial of service (crash) via a request with multiple dots preceding the extension, as demonstrated using foo..php.

Php Php 4.4.0 Php Php 4.4.1 Php Php 4.4.2 Php Php 4.4.3 Php Php 4.4.4 Php Php 4.4.5 Php Php 4.4.6 Php Php 4.4.7 Php Php 4.4.8 Php Php 5.2.0 Php Php 5.2.1 Php Php 5.2.2

Buffer consumption vulnerability in the tempnam function in PHP 5.1.4 and 4.x prior to 4.4.3 allows local users to bypass restrictions and create PHP files with fixed names in other directories via a pathname argument longer than MAXPATHLEN, which prevents a unique string from be...

Php Php 4.0.0 Php Php 4.0.1 Php Php 4.0.2 Php Php 4.0.3 Php Php 4.0.4 Php Php 4.0.5 Php Php 4.1.0 Php Php 4.1.1 Php Php 4.1.2 Php Php 4.2.0 Php Php 4.2.1 Php Php 4.2.2

A regression error in the phpinfo function in PHP 4.4.3 to 4.4.6, and PHP 6.0 in CVS, allows remote malicious users to conduct cross-site scripting (XSS) attacks via GET, POST, or COOKIE array values, which are not escaped in the phpinfo output, as originally fixed for CVE-2005-3...

Php Php 4.4.4 Php Php 4.4.5 Php Php 4.4.6 Php Php 6.0

1 EDB exploit

Buffer overflow in the user_filter_factory_create function in PHP prior to 5.2.2 has unknown impact and local attack vectors.

Php Php 4.0.0 Php Php 4.0.1 Php Php 4.0.2 Php Php 4.0.3 Php Php 4.0.4 Php Php 4.0.5 Php Php 4.0.6 Php Php 4.0.7 Php Php 4.1.0 Php Php 4.1.1 Php Php 4.1.2 Php Php 4.2.0

The dba_replace function in PHP 5.2.6 and 4.x allows context-dependent malicious users to cause a denial of service (file truncation) via a key with the NULL byte. NOTE: this might only be a vulnerability in limited circumstances in which the attacker can modify or add database e...

Php Php 4.0 Php Php 4.0.0 Php Php 4.0.1 Php Php 4.0.2 Php Php 4.0.3 Php Php 4.0.4 Php Php 4.0.5 Php Php 4.0.6 Php Php 4.0.7 Php Php 4.1.0 Php Php 4.1.1 Php Php 4.1.2

Heap-based buffer overflow in ext/mbstring/libmbfl/filters/mbfilter_htmlent.c in the mbstring extension in PHP 4.3.0 up to and including 5.2.6 allows context-dependent malicious users to execute arbitrary code via a crafted string containing an HTML entity, which is not properly ...

Php Php 4.3.0 Php Php 4.3.1 Php Php 4.3.2 Php Php 4.3.3 Php Php 4.3.4 Php Php 4.3.5 Php Php 4.3.6 Php Php 4.3.7 Php Php 4.3.8 Php Php 4.3.9 Php Php 4.3.10 Php Php 4.3.11

The import_request_variables function in PHP 4.0.7 up to and including 4.4.6, and 5.x prior to 5.2.2, when called without a prefix, does not prevent the (1) GET, (2) POST, (3) COOKIE, (4) FILES, (5) SERVER, (6) SESSION, and other superglobals from being overwritten, which allows ...

Php Php 4.0.7 Php Php 4.1.0 Php Php 4.1.1 Php Php 4.1.2 Php Php 4.2.0 Php Php 4.2.1 Php Php 4.2.2 Php Php 4.2.3 Php Php 4.3.0 Php Php 4.3.1 Php Php 4.3.2 Php Php 4.3.3

1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook