Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The WDDX deserializer in the wddx extension in PHP 5 before 5.2.1 and PHP 4 before 4.4.5 does not properly initialize the key_length variable for a numerical key, which allows context-dependent attackers to read stack memory via a wddxPacket element that contains a variable with a string name before a numerical variable.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
PHP 5.2.0及之前版本多个安全漏洞
Vulnerability Description
PHP是广泛使用的通用目的脚本语言，特别适合于Web开发，可嵌入到HTML中。 PHP的实现上存在多个安全漏洞，本地或远程攻击者可以利用这些漏洞获取敏感信息或执行任意代码。 相关的漏洞有： 1) 用户可通过会话扩展绕过safe_mode和open_basedir保护机制； 2) 会话扩展中的溢出可能导致栈破坏； 3) zip、imap和sqlite扩展中存在栈溢出； 4) 流过滤器中存在缓冲区溢出； 5) str_replace()函数中存在溢出； 6) wddx扩展中的漏洞可能导致泄漏敏感信息； 7)
CVSS Information
N/A
Vulnerability Type
N/A