php php 5.1.6 vulnerabilities and exploits

(subscribe to this query)

PHP 4.4.4, 5.1.6, and other versions, when running on Apache, allows local users to modify behavior of other sites hosted on the same web server by modifying the mbstring.func_overload setting within .htaccess, which causes this setting to be applied to other virtual hosts on the...

Php Php 4.4.4 Php Php 5.1.6

1 EDB exploit

The readfile function in PHP 4.4.4, 5.1.6, and 5.2.1 allows context-dependent malicious users to bypass safe_mode restrictions and read arbitrary files by referring to local files with a certain URL syntax instead of a pathname syntax, as demonstrated by a filename preceded a &qu...

Php Php 4.4.4 Php Php 5.1.6 Php Php 5.2.1

Buffer overflow in the php_stream_filter_create function in PHP 5 prior to 5.2.1 allows remote malicious users to cause a denial of service (application crash) via a php://filter/ URL that has a name ending in the '.' character.

Php Php 5.0.0 Php Php 5.0.1 Php Php 5.0.2 Php Php 5.0.3 Php Php 5.0.4 Php Php 5.0.5 Php Php 5.1.0 Php Php 5.1.1 Php Php 5.1.2 Php Php 5.1.3 Php Php 5.1.4 Php Php 5.1.5

The FDF support (ext/fdf) in PHP 5.2.0 and previous versions does not implement the input filtering hooks for ext/filter, which allows remote malicious users to bypass web site filters via an application/vnd.fdf formatted POST.

Php Php 5.0 Php Php 5.0.0 Php Php 5.0.1 Php Php 5.0.2 Php Php 5.0.3 Php Php 5.0.4 Php Php 5.0.5 Php Php 5.1.0 Php Php 5.1.1 Php Php 5.1.2 Php Php 5.1.3 Php Php 5.1.4

1 EDB exploit

Multiple integer overflows in the chunk_split function in PHP 5 prior to 5.2.3 and PHP 4 prior to 4.4.8 allow remote malicious users to cause a denial of service (crash) or execute arbitrary code via the (1) chunks, (2) srclen, and (3) chunklen arguments.

Php Php Php Php 5.0.0 Php Php 5.0.1 Php Php 5.0.2 Php Php 5.0.3 Php Php 5.0.4 Php Php 5.0.5 Php Php 5.1.0 Php Php 5.1.1 Php Php 5.1.2 Php Php 5.1.3 Php Php 5.1.4

1 EDB exploit

The GENERATE_SEED macro in PHP 4.x prior to 4.4.8 and 5.x prior to 5.2.5, when running on 32-bit systems, performs a multiplication using values that can produce a zero seed in rare circumstances, which allows context-dependent malicious users to predict subsequent values of the ...

Php Php Php Php 5 Php Php 5.0.0 Php Php 5.0.1 Php Php 5.0.2 Php Php 5.0.3 Php Php 5.0.4 Php Php 5.0.5 Php Php 5.1.0 Php Php 5.1.1 Php Php 5.1.2 Php Php 5.1.3

PHP 5 prior to 5.2.7 does not enforce the error_log safe_mode restrictions when safe_mode is enabled through a php_admin_flag setting in httpd.conf, which allows context-dependent malicious users to write to arbitrary files by placing a "php_value error_log" entry in a ...

Php Php Php Php 5.0.0 Php Php 5.0.1 Php Php 5.0.2 Php Php 5.0.3 Php Php 5.0.4 Php Php 5.0.5 Php Php 5.1.0 Php Php 5.1.1 Php Php 5.1.2 Php Php 5.1.3 Php Php 5.1.4

1 EDB exploit

Directory traversal vulnerability in the ZipArchive::extractTo function in PHP 5.2.6 and previous versions allows context-dependent malicious users to write arbitrary files via a ZIP file with a file whose name contains .. (dot dot) sequences.

Php Php Php Php 5.0.0 Php Php 5.0.1 Php Php 5.0.2 Php Php 5.0.3 Php Php 5.0.4 Php Php 5.0.5 Php Php 5.1.0 Php Php 5.1.1 Php Php 5.1.2 Php Php 5.1.3 Php Php 5.1.4

Stack-based buffer overflow in the FastCGI SAPI (fastcgi.c) in PHP prior to 5.2.6 has unknown impact and attack vectors.

Php Php Php Php 5.0.0 Php Php 5.0.1 Php Php 5.0.2 Php Php 5.0.3 Php Php 5.0.4 Php Php 5.0.5 Php Php 5.1.0 Php Php 5.1.1 Php Php 5.1.2 Php Php 5.1.3 Php Php 5.1.4

The escapeshellcmd API function in PHP prior to 5.2.6 has unknown impact and context-dependent attack vectors related to "incomplete multibyte chars."

Php Php Php Php 5.0.0 Php Php 5.0.1 Php Php 5.0.2 Php Php 5.0.3 Php Php 5.0.4 Php Php 5.0.5 Php Php 5.1.0 Php Php 5.1.1 Php Php 5.1.2 Php Php 5.1.3 Php Php 5.1.4

1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook