Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple format string vulnerabilities in the phar extension in PHP 5.3 before 5.3.2 allow context-dependent attackers to obtain sensitive information (memory contents) and possibly execute arbitrary code via a crafted phar:// URI that is not properly handled by the (1) phar_stream_flush, (2) phar_wrapper_unlink, (3) phar_parse_url, or (4) phar_wrapper_open_url functions in ext/phar/stream.c; and the (5) phar_wrapper_open_dir function in ext/phar/dirstream.c, which triggers errors in the php_stream_wrapper_log_error function.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
PHP 'phar'扩展多个格式化字符串漏洞
Vulnerability Description
PHP是广泛使用的通用目的脚本语言，特别适合于Web开发，可嵌入到HTML中。 PHP的phar扩展存在多个格式化字符串漏洞，程序ext/phar/stream.c中(1) phar_stream_flush, (2) phar_wrapper_unlink, (3) phar_parse_url, 或(4) ext/phar/stream.c函数，和(5)程序ext/phar/dirstream.c中phar_wrapper_open_dir函数，无法正确处理的特制phar:// URI，会触发php_
CVSS Information
N/A
Vulnerability Type
N/A