-
PEAR Archive_Tar PHP Object Injection
PHP Files ≈ Packet Storm Jan 11, 2019 | 00:33 amPEAR Archive_Tar versions prior to 1.4.4 suffers from a php object injection vulnerability.
Read more... -
SugarCRM Web Logic Hooks Module Path Traversal
PHP Files ≈ Packet Storm Jan 2, 2019 | 00:55 amSugarCRM versions prior to 7.9.5.0, 8.0.2, and 8.2.0 suffer from a path traversal vulnerability. User input passed through the "webhook_target_module" parameter is not properly sanitized before being used to save PHP code into the hooks file through the Web Logic[…]
Read more... -
SugarCRM Web Logic Hooks Module PHP Code Injection
PHP Files ≈ Packet Storm Jan 2, 2019 | 00:44 amSugarCRM versions prior to 7.9.5.0, 8.0.2, and 8.2.0 suffer from a PHP code injection vulnerability. User input passed through the "trigger_event" parameter is not properly sanitized before being used to save PHP code into the 'logic_hooks.php' file through the Web[…]
Read more... -
SugarCRM addLabels PHP Code Injection
PHP Files ≈ Packet Storm Jan 1, 2019 | 23:22 pmSugarCRM versions prior to 7.9.5.0, 8.0.2, and 8.2.0 suffer from a PHP code injection vulnerability. User input passed through key values of the 'labels_' parameters is not properly sanitized before being used to save PHP code within the "ParserLabel::addLabels()" method[…]
Read more... -
SugarCRM WorkFlow PHP Code Injection
PHP Files ≈ Packet Storm Jan 1, 2019 | 21:21 pmSugarCRM versions prior to 7.9.4.0 and 7.11.0.0 suffer from a PHP code injection vulnerability in the WorkFlow module. User input passed through the $_POST['base_module'] parameter to the "Save" action of the WorkFlow module is not properly sanitized before being used[…]
Read more... -
SugarCRM SaveDropDown PHP Code Injection
PHP Files ≈ Packet Storm Jan 1, 2019 | 20:33 pmSugarCRM versions prior to 7.9.5.0, 8.0.2, and 8.2.0 suffer from a PHP code injection vulnerability. User input passed through key values of the 'list_value' JSON parameter is not properly sanitized before being used to save PHP code when adding/saving dropdowns[…]
Read more... -
How To Exploit PHP Remotely To Bypass Filters And WAF Rules
PHP Files ≈ Packet Storm Dec 25, 2018 | 11:11 amWhitepaper called How to Exploit PHP Remotely to Bypass Filters and WAF Rules.
Read more... -
WordPress Snap Creek Duplicator Code Injection
PHP Files ≈ Packet Storm Dec 12, 2018 | 06:19 amWhen the WordPress plugin Snap Creek Duplicator restores a backup, it leaves dangerous files in the filesystem such as installer.php and installer-backup.php. These files allow anyone to call a function that overwrite the wp-config.php file AND this function does not[…]
Read more... -
PHP Source Code Analysis
PHP Files ≈ Packet Storm Dec 12, 2018 | 05:55 amWhitepaper called PHP Source Code Analysis. Written in Turkish.
Read more... -
Debian Security Advisory 4353-1
PHP Files ≈ Packet Storm Dec 11, 2018 | 20:15 pmDebian Linux Security Advisory 4353-1 - Multiple security issues were found in PHP, a widely-used open source denial of service/information disclosure when parsing malformed images, the Apache module allowed cross-site-scripting via the body of a insufficient input validation which can[…]
Read more...
Jedesmal, wenn mit eingeschaltetem AdBlocker eine Webseite besucht wird, stirbt in einem Labor ein unschuldiges, niedliches Kaninchen einen grausamen Tod! Zusätzlich werden einige Funktionen dieser Webseite durch den AdBlocker blockiert. Bitte deaktivieren Sie Ihren AdBlocker für diese Webseite und retten Sie unschuldige Kaninchen!
Sie können durch Schliessen dieses Fensters natürlich mit AdBlocker weitermachen - wenn Sie mit dieser Schuld leben können .... es liegt an Ihnen - AdBlocker abschalten und ruhig schlafen können oder mit AdBlocker weitermachen und von übelsten Albträumen gequält werden!
Wir haben Sie gewarnt ....