SecurityReason - Research

	SecurityReason
News

Search

SecurityAlert

About SecurityAlert

ExploitAlert

SecurityReason Research

	RSS
News

SecurityAlert

ExploitAlert

Apache

PHP

	Corporate
Contact

About us

	Services
SecurePHP


	Note
If you have found a vulnerability, please send to our SecurityAlert Database : secalert()securityreason()com Also if you have new ( 0-day ) exploit, please send to our ExploitAlert Archive : exploit()securityreason()com

SecurityReason : Research

SecurityReason : Advisories Back 01 02 03 04 All Pages 4

25.03.2008 -	*BSD libc (strfmon) Multiple vulnerabilities
20.03.2008 -	PHP 5.2.5 and prior : *printf() functions Integer Overflow
22.01.2008 -	PHP 5.2.5 cURL safe_mode bypass
15.01.2008 -	Apache (mod_status) Refresh Header - Open Redirector (XSS)
10.01.2008 -	Apache (mod_proxy_ftp) Undefined Charset UTF-7 XSS Vulnerability
09.01.2008 -	Apache2 CSRF, XSS, Memory Corruption and Denial of Service Vulnerability
25.11.2007 -	PHP 5.2.4 mail.force_extra_parameters unsecure
12.09.2007 -	Apache2 Undefined Charset UTF-7 XSS Vulnerability
27.06.2007 -	PHP 5.2.3 PHP 4.4.7, htaccess safemode and open_basedir Bypass
25.01.2007 -	PHP 5.2.0 safe_mode bypass (by Writing Mode)
08.12.2006 -	PHP 5.2.0 session.save_path safe_mode and open_basedir bypass
09.09.2006 -	PHP 5.1.6 / 4.4.4 Critical php_admin* bypass by ini_restore()
26.06.2006 -	error_log() Safe Mode Bypass PHP 5.1.4 and 4.4.2
11.06.2006 -	tempnam() Bypass unique file name PHP 5.1.4
27.05.2006 -	cURL Safe Mode Bypass PHP 4.4.2 and 5.1.4

SecurityReason : Exploits

27.06.2007 -	PHP 5.2.3, htaccess safemode and open_basedir Bypass
08.04.2006 -	PHP 4.4.2 and PHP 5.1.2 Safe Mode Bypass
16.02.2006 -	Critical SQL Injection PHPNuke <= 7.8 - Your_Account
08.02.2006 -	phpBB 2.0.19 CSRF Image
15.11.2005 -	Critical SQL Injection PHPNuke <= 7.8
11.11.2005 -	phpBB 2.0.18 sql query problem
19.10.2005 -	PHPNuke 7.8 - 7.9 Remote Directory Traversal Exploit
10.10.2005 -	phpMyAdmin 2.6.4-pl1 Local file inclusion
04.09.2005 -	Ctitical Sql Injection PostNuke 0.760-RC2=>x

	Alert
BSD libc (strfmon) Multiple vulnerabilities - 2008-03-25 Maksymilian Arciemowicz discovered a Integer Overflow vulnerability in the libc library "strfmon()" function.A vulnerability could allow an attacker who successfully exploits this vulnerability to take control of the affected BSD systems.


	Apache
» Apache-SSL memory disclosure

» Apache mod_negotiation Xss and Http Response Splitting

» Apache (mod_status) Refresh Header - Open Redirector (XSS)

» Apache (mod_proxy_ftp) Undefined Charset UTF-7 XSS Vulnerability



	PHP
» PHP 5.2.5 and prior : *printf() functions Integer Overflow

» PHP 5.2.5 cURL safe_mode bypass

» PHP 5.2.4 mail.force_extra_paramete rs unsecure

» PHP <= 5.2.5 stream_wrapper_register() Denial of service