Search:Author:PHP-SECURITY - security vulnerabilities database

[EN] securityvulns.ru
no-pyccku

ID: PHP-SECURITY
Name: the Month of PHP Bugs
URL: http://www.php-security.org/

MOPS-2010-020: Xinha WYSIWYG Plugin Configuration Injection Vulnerability
MOPS-2010-019: Serendipity WYSIWYG Editor Plugin Configuration Injection Vulnerability
MOPS-2010-011: DeluxeBB newthread SQL Injection Vulnerability
ClanTiger Shoutbox Module s_email SQL Injection vulnerability
MOPS-2010-005: ClanSphere MySQL Driver Generic SQL Injection Vulnerability
MOPS-2010-004: ClanSphere Captcha Generator Blind SQL Injection Vulnerability
MOPS-2010-002: Campsite TinyMCE Article Attachment SQL Injection Vulnerability
MOPS-2010-018: EFront ask_chat chatrooms_ID SQL Injection Vulnerability
preg_quote() Interruption Information Leak Vulnerability
MOPS-2010-015: PHP ZEND_SL Opcode Interruption Address Information Leak Vulnerability
MOPS-2010-010: PHP html_entity_decode() Interruption Information Leak Vulnerability
MOPS-2010-008: PHP chunk_split() Interruption Information Leak Vulnerability
MOPS-2010-006: PHP addcslashes() Interruption Information Leak Vulnerability
MOPS-2010-003: PHP dechunk Filter Signed Comparison Vulnerability
MOPS-2010-001: PHP hash_update_file() Already Freed Resource Access Vulnerability
MOPS-2010-016: PHP ZEND_SR Opcode Interruption Address Information Leak Vulnerability
MOPS-2010-014: PHP ZEND_BW_XOR Opcode Interruption Address Information Leak Vulnerability
MOPS-2010-013: PHP sqlite_array_query() Uninitialized Memory Usage Vulnerability
MOPS-2010-012: PHP sqlite_single_query() Uninitialized Memory Usage Vulnerability
MOPS-2010-009: PHP shm_put_var() Already Freed Resource Access Vulnerability
MOPB-39-2007:PHP str_replace() Memory Allocation Integer Overflow Vulnerability
MOPB-40-2007:PHP imap_mail_compose() Boundary Stack Buffer Overflow Vulnerability
MOPB-41-2007:PHP 5 sqlite_udf_decode_binary() Buffer Overflow Vulnerability
MOPB-42-2007:PHP 5 php_stream_filter_create() Off By One Vulnerablity
MOPB-43-2007:PHP msg_receive() Memory Allocation Integer Overflow Vulnerabilty
MOPB-44-2007:PHP 5.2.0 Memory Manager Signed Comparision Vulnerability
PMOPB-45-2007:PHP ext/filter Email Validation Vulnerability
MOPB-36-2007:PHP session.save_path open_basedir Bypass Vulnerability
MOPB-37-2007:PHP iptcembed() Interruption Information Leak Vulnerability
MOPB-38-2007:PHP printf() Family 64 Bit Casting Vulnerabilities
MOPB-34-2007:PHP mail() Header Injection Through Subject and To Parameters
MOPB-33-2007:PHP mail() Message ASCIIZ Byte Truncation
MOPB-35-2007:PHP 4 zip_entry_read() Integer Overflow Vulnerability
MOPB-29-2007:PHP 5.2.1 unserialize() Information Leak Vulnerability
MOPB-32-2007:PHP 4.4.5/4.4.6 session_decode() Double Free Vulnerability
MOPB-30-2007:PHP _SESSION unset() Vulnerability
MOPB-31-2007:PHP _SESSION Deserialization Overwrite Vulnerability
MOPB-25-2007:PHP header() Space Trimming Buffer Underflow Vulnerability
MOPB-26-2007:PHP mb_parse_str() register_globals Activation Vulnerability
MOPB-27-2007:PHP ext/gd Already Freed Resource Access Vulnerability
MOPB-28-2007:PHP hash_update_file() Already Freed Resource Access Vulnerability
MOPB-21-2007:PHP compress.bzip2:// URL Wrapper safemode and open_basedir Bypass Vulnerability
MOPB-22-2007:PHP session_regenerate_id() Double Free Vulnerability
MOPB-23-2007:PHP 5 Rejected Session Identifier Double Free Vulnerability
MOPB-24-2007:PHP array_user_key_compare() Double DTOR Vulnerability
MOPB-18-2007:PHP ext/filter HTML Tag Stripping Bypass Vulnerability
MOPB-19-2007:PHP ext/filter Space Trimming Buffer Underflow Vulnerability
MOPB-15-2007:PHP shmop Functions Resource Verification Vulnerability
MOPB-14-2007:PHP substr_compare() Information Leak Vulnerability
MOPB-16-2007:PHP zip:// URL Wrapper Buffer Overflow Vulnerability
MOPB-17-2007:PHP ext/filter FDF Post Bypass Vulnerability
BONUS-12-2007:mod_security POST Rules Bypass Vulnerability
MOPB-10-2007:PHP php_binary Session Deserialization Information Leak Vulnerability
MOPB-11-2007:PHP WDDX Session Deserialization Information Leak Vulnerability
MOPB-13-2007:PHP 4 Ovrimos Extension Multiple Vulnerabilities
MOPB-08-2007:PHP 4 phpinfo() XSS Vulnerability (Deja-vu)
MOPB-09-2007:PHP wddx_deserialize() String Append Buffer Overflow Vulnerability
BONUS-06-2007:Zend Platform Insecure File Permission Local Root Vulnerability
BONUS-07-2007:Zend Platform ini_modifier Local Root Vulnerability
MOPB-03-2007:PHP Variable Destructor Deep Recursion Stack Overflow
MOPB-02-2007:PHP Executor Deep Recursion Stack Overflow
MOPB-05-2007:PHP unserialize() 64 bit Array Creation Denial of Service Vulnerability
MOPB-01-2007:PHP 4 Userland ZVAL Reference Counter Overflow Vulnerability
MOPB-04-2007:PHP 4 unserialize() ZVAL Reference Counter Overflow

test server