php php 5.2.16 vulnerabilities and exploits

(subscribe to this query)

strtod.c, as used in the zend_strtod function in PHP 5.2 prior to 5.2.17 and 5.3 prior to 5.3.5, and other products, allows context-dependent malicious users to cause a denial of service (infinite loop) via a certain floating-point value in scientific notation, which is not prope...

Php Php 5.2.0 Php Php 5.2.1 Php Php 5.2.2 Php Php 5.2.3 Php Php 5.2.4 Php Php 5.2.5 Php Php 5.2.6 Php Php 5.2.7 Php Php 5.2.8 Php Php 5.2.9 Php Php 5.2.10 Php Php 5.2.11

1 EDB exploit

PHP prior to 5.3.9 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote malicious users to cause a denial of service (CPU consumption) by sending many crafted parameters.

Php Php Php Php 5.0.0 Php Php 5.0.1 Php Php 5.0.2 Php Php 5.0.3 Php Php 5.0.4 Php Php 5.0.5 Php Php 5.1.1 Php Php 5.1.2 Php Php 5.1.3 Php Php 5.1.4 Php Php 5.1.5

3 EDB exploits

The PDORow implementation in PHP prior to 5.3.9 does not properly interact with the session feature, which allows remote malicious users to cause a denial of service (application crash) via a crafted application that uses a PDO driver for a fetch and then calls the session_start ...

Php Php Php Php 5.0.0 Php Php 5.0.1 Php Php 5.0.2 Php Php 5.0.3 Php Php 5.0.4 Php Php 5.0.5 Php Php 5.1.1 Php Php 5.1.2 Php Php 5.1.3 Php Php 5.1.4 Php Php 5.1.5

1 EDB exploit

Memory leak in the timezone functionality in PHP prior to 5.3.9 allows remote malicious users to cause a denial of service (memory consumption) by triggering many strtotime function calls, which are not properly handled by the php_date_parse_tzfile cache.

Php Php Php Php 5.0.0 Php Php 5.0.1 Php Php 5.0.2 Php Php 5.0.3 Php Php 5.0.4 Php Php 5.0.5 Php Php 5.1.1 Php Php 5.1.2 Php Php 5.1.3 Php Php 5.1.4 Php Php 5.1.5

1 EDB exploit

PHP prior to 5.3.9 has improper libxslt security settings, which allows remote malicious users to create arbitrary files via a crafted XSLT stylesheet that uses the libxslt output extension.

Php Php Php Php 5.0.0 Php Php 5.0.1 Php Php 5.0.2 Php Php 5.0.3 Php Php 5.0.4 Php Php 5.0.5 Php Php 5.1.0 Php Php 5.1.1 Php Php 5.1.2 Php Php 5.1.3 Php Php 5.1.4

The file-upload implementation in rfc1867.c in PHP prior to 5.4.0 does not properly handle invalid [ (open square bracket) characters in name values, which makes it easier for remote malicious users to cause a denial of service (malformed $_FILES indexes) or conduct directory tra...

Php Php Php Php 5.0.0 Php Php 5.0.1 Php Php 5.0.2 Php Php 5.0.3 Php Php 5.0.4 Php Php 5.0.5 Php Php 5.1.0 Php Php 5.1.1 Php Php 5.1.2 Php Php 5.1.3 Php Php 5.1.4

Session fixation vulnerability in the Sessions subsystem in PHP prior to 5.5.2 allows remote malicious users to hijack web sessions by specifying a session ID.

Php Php Php Php 5.0.0 Php Php 5.0.1 Php Php 5.0.2 Php Php 5.0.3 Php Php 5.0.4 Php Php 5.0.5 Php Php 5.1.0 Php Php 5.1.1 Php Php 5.1.2 Php Php 5.1.3 Php Php 5.1.4

exif.c in the Exif extension in PHP prior to 5.3.6 on 64-bit platforms performs an incorrect cast, which allows remote malicious users to cause a denial of service (application crash) via an image with a crafted Image File Directory (IFD) that triggers a buffer over-read.

Php Php Php Php 1.0 Php Php 2.0 Php Php 2.0b10 Php Php 3.0 Php Php 3.0.1 Php Php 3.0.2 Php Php 3.0.3 Php Php 3.0.4 Php Php 3.0.5 Php Php 3.0.6 Php Php 3.0.7

1 EDB exploit

Integer overflow in ext/shmop/shmop.c in PHP prior to 5.3.6 allows context-dependent malicious users to cause a denial of service (crash) and possibly read sensitive memory via a large third argument to the shmop_read function.

Php Php Php Php 1.0 Php Php 2.0 Php Php 2.0b10 Php Php 3.0 Php Php 3.0.1 Php Php 3.0.2 Php Php 3.0.3 Php Php 3.0.4 Php Php 3.0.5 Php Php 3.0.6 Php Php 3.0.7

1 EDB exploit

Buffer overflow in the strval function in PHP prior to 5.3.6, when the precision configuration option has a large value, might allow context-dependent malicious users to cause a denial of service (application crash) via a small numerical value in the argument.

Php Php Php Php 1.0 Php Php 2.0 Php Php 2.0b10 Php Php 3.0 Php Php 3.0.1 Php Php 3.0.2 Php Php 3.0.3 Php Php 3.0.4 Php Php 3.0.5 Php Php 3.0.6 Php Php 3.0.7

1 2 3 4 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook