php php 4.4.9 vulnerabilities and exploits

(subscribe to this query)

The dba_replace function in PHP 5.2.6 and 4.x allows context-dependent malicious users to cause a denial of service (file truncation) via a key with the NULL byte. NOTE: this might only be a vulnerability in limited circumstances in which the attacker can modify or add database e...

Php Php 4.0 Php Php 4.0.0 Php Php 4.0.1 Php Php 4.0.2 Php Php 4.0.3 Php Php 4.0.4 Php Php 4.0.5 Php Php 4.0.6 Php Php 4.0.7 Php Php 4.1.0 Php Php 4.1.1 Php Php 4.1.2

Heap-based buffer overflow in ext/mbstring/libmbfl/filters/mbfilter_htmlent.c in the mbstring extension in PHP 4.3.0 up to and including 5.2.6 allows context-dependent malicious users to execute arbitrary code via a crafted string containing an HTML entity, which is not properly ...

Php Php 4.3.0 Php Php 4.3.1 Php Php 4.3.2 Php Php 4.3.3 Php Php 4.3.4 Php Php 4.3.5 Php Php 4.3.6 Php Php 4.3.7 Php Php 4.3.8 Php Php 4.3.9 Php Php 4.3.10 Php Php 4.3.11

The tempnam function in ext/standard/file.c in PHP prior to 5.2.12 and 5.3.x prior to 5.3.1 allows context-dependent malicious users to bypass safe_mode restrictions, and create files in group-writable or world-writable directories, via the dir and prefix arguments.

Php Php Php Php 1.0 Php Php 2.0 Php Php 2.0b10 Php Php 3.0 Php Php 3.0.1 Php Php 3.0.2 Php Php 3.0.3 Php Php 3.0.4 Php Php 3.0.5 Php Php 3.0.6 Php Php 3.0.7

Use-after-free vulnerability in the substr_replace function in PHP 5.3.6 and previous versions allows context-dependent malicious users to cause a denial of service (memory corruption) or possibly have unspecified other impact by using the same variable for multiple arguments.

Php Php Php Php 1.0 Php Php 2.0 Php Php 2.0b10 Php Php 3.0 Php Php 3.0.1 Php Php 3.0.2 Php Php 3.0.3 Php Php 3.0.4 Php Php 3.0.5 Php Php 3.0.6 Php Php 3.0.7

The rfc1867_post_handler function in main/rfc1867.c in PHP prior to 5.3.7 does not properly restrict filenames in multipart/form-data POST requests, which allows remote malicious users to conduct absolute path traversal attacks, and possibly create or overwrite arbitrary files, v...

Php Php Php Php 1.0 Php Php 2.0 Php Php 2.0b10 Php Php 3.0 Php Php 3.0.1 Php Php 3.0.2 Php Php 3.0.3 Php Php 3.0.4 Php Php 3.0.5 Php Php 3.0.6 Php Php 3.0.7

1 EDB exploit

Integer overflow in the NumberFormatter::getSymbol (aka numfmt_get_symbol) function in PHP 5.3.3 and previous versions allows context-dependent malicious users to cause a denial of service (application crash) via an invalid argument.

Php Php Php Php 1.0 Php Php 2.0 Php Php 2.0b10 Php Php 3.0 Php Php 3.0.1 Php Php 3.0.2 Php Php 3.0.3 Php Php 3.0.4 Php Php 3.0.5 Php Php 3.0.6 Php Php 3.0.7

1 EDB exploit

Race condition in the PCNTL extension in PHP prior to 5.3.4, when a user-defined signal handler exists, might allow context-dependent malicious users to cause a denial of service (memory corruption) via a large number of concurrent signals.

Php Php Php Php 1.0 Php Php 2.0 Php Php 2.0b10 Php Php 3.0 Php Php 3.0.1 Php Php 3.0.2 Php Php 3.0.3 Php Php 3.0.4 Php Php 3.0.5 Php Php 3.0.6 Php Php 3.0.7

The SplFileInfo::getType function in the Standard PHP Library (SPL) extension in PHP prior to 5.3.4 on Windows does not properly detect symbolic links, which might make it easier for local users to conduct symlink attacks by leveraging cross-platform differences in the stat struc...

Php Php Php Php 1.0 Php Php 2.0 Php Php 2.0b10 Php Php 3.0 Php Php 3.0.1 Php Php 3.0.2 Php Php 3.0.3 Php Php 3.0.4 Php Php 3.0.5 Php Php 3.0.6 Php Php 3.0.7

The session extension in PHP prior to 5.2.4 might allow local users to bypass open_basedir restrictions via a session file that is a symlink.

Php Php Php Php 1.0 Php Php 2.0 Php Php 2.0b10 Php Php 3.0 Php Php 3.0.1 Php Php 3.0.2 Php Php 3.0.3 Php Php 3.0.4 Php Php 3.0.5 Php Php 3.0.6 Php Php 3.0.7

1 EDB exploit

Integer overflow in the xml_utf8_decode function in ext/xml/xml.c in PHP prior to 5.2.11 makes it easier for remote malicious users to bypass cross-site scripting (XSS) and SQL injection protection mechanisms via a crafted string that uses overlong UTF-8 encoding, a different vul...

Php Php Php Php 1.0 Php Php 2.0 Php Php 2.0b10 Php Php 3.0 Php Php 3.0.1 Php Php 3.0.2 Php Php 3.0.3 Php Php 3.0.4 Php Php 3.0.5 Php Php 3.0.6 Php Php 3.0.7

1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook