Php Exploits
1,334 exploits tracked across all sources.
Home FTP Server 1.11.1.149 - 'RETR'/'DELE'/'RMD' Directory Traversal
by Yakir Wizman
BlueCMS 1.6 - 'x-forwarded-for' Header SQL Injection
by cnryan
PHP-Fusion - Path Traversal
Directory traversal vulnerability in maincore.php in PHP-Fusion allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the folder_level parameter. NOTE: this issue has been disputed by a reliable third party
by MoDaMeR
PHPKick 0.8 - SQL Injection
SQL injection vulnerability in statistics.php in PHPKick 0.8 allows remote attackers to execute arbitrary SQL commands via the gameday parameter in an overview action.
by garwga
JV2 Folder Gallery 3.1.1 - 'popup_slideshow.php' Multiple Vulnerabilities
by eidelweiss
Shopex Ecshop - SQL Injection
SQL injection vulnerability in search.php in ECShop 2.7.2 allows remote attackers to execute arbitrary SQL commands via the encode parameter. NOTE: some of these details are obtained from third party information.
by Jannock
phpBB 2.x <2.0.11 - RCE
viewtopic.php in phpBB 2.x before 2.0.11 improperly URL decodes the highlight parameter when extracting words and phrases to highlight, which allows remote attackers to execute arbitrary PHP code by double-encoding the highlight value so that special characters are inserted into the result, which is then processed by PHP exec, as exploited by the Santy.A worm.
by Michael Brooks
Beyond Compare 3.0.13 b9599 - '.zip' Local Stack Buffer Overflow
by mr_me
Knowledgeroot (fckeditor) - Arbitrary File Upload
by eidelweiss
Php < 5.3.2 - Integer Overflow
The dechunk filter in PHP 5.3 through 5.3.2, when decoding an HTTP chunked encoding stream, allows context-dependent attackers to cause a denial of service (crash) and possibly trigger memory corruption via a negative chunk size, which bypasses a signed comparison, related to an integer overflow in the chunk size decoder.
by Stefan Esser
CVSS 9.8
Easyzip 2000 3.5 - '.zip' Local Stack Buffer Overflow
by mr_me
phpegasus 0.1.2 - 'FCKeditor' Arbitrary File Upload
by eidelweiss
By Source