php php 5.0.0 vulnerabilities and exploits

(subscribe to this query)

The disable_functions feature in PHP 4 and 5 allows malicious users to bypass intended restrictions by using an alias, as demonstrated by using ini_alter when ini_set is disabled.

Php Php 4.0 Php Php 5.0.0

The wddx_deserialize function in wddx.c 1.119.2.10.2.12 and 1.119.2.10.2.13 in PHP 5, as modified in CVS on 20070224 and fixed on 20070304, calls strlcpy where strlcat was intended and uses improper arguments, which allows context-dependent malicious users to execute arbitrary co...

1 EDB exploit

The addslashes function in PHP 4.3.9 does not properly escape a NULL (/0) character, which may allow remote malicious users to read arbitrary files in PHP applications that contain a directory traversal vulnerability in require or include statements, but are otherwise protected b...

Php Php 4.3.6 Php Php 4.3.7 Php Php 4.3.8 Php Php 4.3.9 Php Php 5.0 Php Php 5.0.0 Php Php 5.0.1 Php Php 5.0.2

1 EDB exploit

Multiple HTTP response splitting vulnerabilities in PHP 5.1.1 allow remote malicious users to inject arbitrary HTTP headers via a crafted Set-Cookie header, related to the (1) session extension (aka ext/session) and the (2) header function.

Php Php 5.0 Php Php 5.0.0 Php Php 5.0.1 Php Php 5.0.2 Php Php 5.0.3 Php Php 5.0.4 Php Php 5.0.5 Php Php 5.1.0 Php Php 5.1.1

Buffer overflow in PHP prior to 5.2.0 allows remote malicious users to execute arbitrary code via crafted UTF-8 inputs to the (1) htmlentities or (2) htmlspecialchars functions.

Php Php Php Php 5.0 Php Php 5.0.0 Php Php 5.0.1 Php Php 5.0.2 Php Php 5.0.3 Php Php 5.0.4 Php Php 5.0.5 Php Php 5.1.0 Php Php 5.1.1 Php Php 5.1.2 Php Php 5.1.3

Unspecified vulnerabilities in PHP, probably prior to 5.2.0, allow local users to bypass open_basedir restrictions and perform unspecified actions via unspecified vectors involving the (1) chdir and (2) tempnam functions. NOTE: the tempnam vector might overlap CVE-2006-1494.

Php Php Php Php 5.0 Php Php 5.0.0 Php Php 5.0.1 Php Php 5.0.2 Php Php 5.0.3 Php Php 5.0.4 Php Php 5.0.5 Php Php 5.1.0 Php Php 5.1.1 Php Php 5.1.2 Php Php 5.1.3

Buffer overflow in the php_stream_filter_create function in PHP 5 prior to 5.2.1 allows remote malicious users to cause a denial of service (application crash) via a php://filter/ URL that has a name ending in the '.' character.

Php Php 5.0.0 Php Php 5.0.1 Php Php 5.0.2 Php Php 5.0.3 Php Php 5.0.4 Php Php 5.0.5 Php Php 5.1.0 Php Php 5.1.1 Php Php 5.1.2 Php Php 5.1.3 Php Php 5.1.4 Php Php 5.1.5

The FDF support (ext/fdf) in PHP 5.2.0 and previous versions does not implement the input filtering hooks for ext/filter, which allows remote malicious users to bypass web site filters via an application/vnd.fdf formatted POST.

Php Php 5.0 Php Php 5.0.0 Php Php 5.0.1 Php Php 5.0.2 Php Php 5.0.3 Php Php 5.0.4 Php Php 5.0.5 Php Php 5.1.0 Php Php 5.1.1 Php Php 5.1.2 Php Php 5.1.3 Php Php 5.1.4

1 EDB exploit

Multiple integer overflows in the chunk_split function in PHP 5 prior to 5.2.3 and PHP 4 prior to 4.4.8 allow remote malicious users to cause a denial of service (crash) or execute arbitrary code via the (1) chunks, (2) srclen, and (3) chunklen arguments.

Php Php Php Php 5.0.0 Php Php 5.0.1 Php Php 5.0.2 Php Php 5.0.3 Php Php 5.0.4 Php Php 5.0.5 Php Php 5.1.0 Php Php 5.1.1 Php Php 5.1.2 Php Php 5.1.3 Php Php 5.1.4

1 EDB exploit

PHP 5 prior to 5.2.7 does not enforce the error_log safe_mode restrictions when safe_mode is enabled through a php_admin_flag setting in httpd.conf, which allows context-dependent malicious users to write to arbitrary files by placing a "php_value error_log" entry in a ...

Php Php Php Php 5.0.0 Php Php 5.0.1 Php Php 5.0.2 Php Php 5.0.3 Php Php 5.0.4 Php Php 5.0.5 Php Php 5.1.0 Php Php 5.1.1 Php Php 5.1.2 Php Php 5.1.3 Php Php 5.1.4

1 EDB exploit

1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook