Remi Collet

3 exploits Active since Jun 2014
CVE-2014-9709 WRITEUP WRITEUP
PHP < 5.5.21 and 5.6.x < 5.6.5 - Denial of Service via Crafted GIF Image Handling
The GetCode_ function in gd_gif_in.c in GD 2.1.1 and earlier, as used in PHP before 5.5.21 and 5.6.x before 5.6.5, allows remote attackers to cause a denial of service (buffer over-read and application crash) via a crafted GIF image that is improperly handled by the gdImageCreateFromGif function.
CVE-2012-5583 WRITEUP WRITEUP
phpCAS < 1.3.2 - Man-in-the-Middle Attack via Unverified X.509 Certificate
phpCAS before 1.3.2 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.
CVE-2017-1000071 WRITEUP HIGH WRITEUP
Jasig phpCAS 1.3.4 - Authentication Bypass via validateCAS20 Function
Jasig phpCAS version 1.3.4 is vulnerable to an authentication bypass in the validateCAS20 function when configured to authenticate against an old CAS server.
CVSS 8.1