php Archives - CVE Vulnerability

CVE-2008-7068

Sun, 26 Feb 2023 09:11:50 +0000

The dba_replace function in PHP 5.2.6 and 4.x allows context-dependent attackers to cause a denial of service (file truncation) via a key with the NULL byte. NOTE: this might only be a vulnerability in limited circumstances in which the attacker can modify or add database entries but does not have permissions to truncate the file.

The post CVE-2008-7068 appeared first on CVE Vulnerability.

CVE-2008-7002

Sun, 26 Feb 2023 09:11:49 +0000

PHP 5.2.5 does not enforce (a) open_basedir and (b) safe_mode_exec_dir restrictions for certain functions, which might allow local users to bypass intended access restrictions and call programs outside of the intended directory via the (1) exec, (2) system, (3) shell_exec, (4) passthru, or (5) popen functions, possibly involving pathnames such as “C:” drive notation.

The post CVE-2008-7002 appeared first on CVE Vulnerability.

CVE-2008-0373

Sun, 26 Feb 2023 09:08:31 +0000

Unrestricted file upload vulnerability in PHP F1 Max’s File Uploader allows remote attackers to upload and execute arbitrary PHP files.

The post CVE-2008-0373 appeared first on CVE Vulnerability.

CVE-2007-6512

Sun, 26 Feb 2023 09:08:12 +0000

PHP MySQL Banner Exchange 2.2.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain database information via a direct request to inc/lib.inc.

The post CVE-2007-6512 appeared first on CVE Vulnerability.

CVE-2007-4889

Sun, 26 Feb 2023 09:07:25 +0000

The MySQL extension in PHP 5.2.4 and earlier allows remote attackers to bypass safe_mode and open_basedir restrictions via the MySQL (1) LOAD_FILE, (2) INTO DUMPFILE, and (3) INTO OUTFILE functions, a different issue than CVE-2007-3997.

The post CVE-2007-4889 appeared first on CVE Vulnerability.

CVE-2007-1382

Sun, 26 Feb 2023 09:05:51 +0000

The PHP COM extensions for PHP on Windows systems allow context-dependent attackers to execute arbitrary code via a WScript.Shell COM object, as demonstrated by using the Run method of this object to execute cmd.exe, which bypasses PHP’s safe mode.

The post CVE-2007-1382 appeared first on CVE Vulnerability.

CVE-2020-36193

Sun, 26 Feb 2023 06:41:33 +0000

Tar.php in Archive_Tar through 1.4.11 allows write operations with Directory Traversal due to inadequate checking of symbolic links, a related issue to CVE-2020-28948.

The post CVE-2020-36193 appeared first on CVE Vulnerability.

CVE-2020-28948

Sun, 26 Feb 2023 06:40:48 +0000

Archive_Tar through 1.4.10 allows an unserialization attack because phar: is blocked but PHAR: is not blocked.

The post CVE-2020-28948 appeared first on CVE Vulnerability.

CVE-2020-28949

Sun, 26 Feb 2023 06:40:48 +0000

Archive_Tar through 1.4.10 has :// filename sanitization only to address phar attacks, and thus any other stream-wrapper attack (such as file:// to overwrite files) can still succeed.

The post CVE-2020-28949 appeared first on CVE Vulnerability.

CVE-2019-11037

Sun, 26 Feb 2023 06:29:24 +0000

In PHP imagick extension in versions between 3.3.0 and 3.4.4, writing to an array of values in ImagickKernel::fromMatrix() function did not check that the address will be within the allocated array. This could lead to out of bounds write to memory if the function is called with the data controlled by untrusted party.

The post CVE-2019-11037 appeared first on CVE Vulnerability.