Most recent entries from all

bdu:2024-07677

Withdrawn: BELL-CVE-2024-8926 — CVE-2024-8926 does not affect BellSoft software

Withdrawn by the publisher.

BIT-libphp-2024-8926 — PHP CGI Parameter Injection Vulnerability (CVE-2024-4577 bypass)

Affected: Bitnami: libphp

In PHP versions 8.1.* before 8.1.30, 8.2.* before 8.2.24, 8.3.* before 8.3.12, when using a certain non-standard configurations of Windows codepages, the fixes for CVE-2024-4577 https://github.com/advisories/GHSA-vxpp-6299-mxw3 may still be bypassed and the same command injection related to Windows "Best Fit" codepage behavior can be achieved. This may allow a malicious user to pass options to PHP binary being run, and thus reveal the source code of scripts, run arbitrary PHP code on the server, etc.

certfr-2024-avi-0818 — De multiples vulnérabilités ont été découvertes dans PHP. Certaines d'entre elles permettent à un attaquant de provoque…

certfr-2024-avi-0818

EUVD-2026-258728

fkie_cve-2024-8926

msrc_CVE-2024-8926 — PHP CGI Parameter Injection Vulnerability (CVE-2024-4577 bypass)

msrc_CVE-2024-8926

OESA-2024-2248 — php security update

Affected: openEuler:20.03-LTS-SP4: php, openEuler:22.03-LTS-SP1: php, openEuler:24.03-LTS: php, openEuler:22.03-LTS-SP4: php, openEuler:22.03-LTS-SP3: php

PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is fairly simple. The most common use of PHP coding is probably as a replacement for CGI scripts. %if 1 The php package contains the module (often referred to as mod_php) which adds support for the PHP language to Apache HTTP Server when running in prefork mode. This module is deprecated. %endif Security Fix(es):PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is fairly simple. The most common use of PHP coding is probably as a replacement for CGI scripts. The php package contains the module (often referred to as mod_php) which adds support for the PHP language to Apache HTTP Server. Security Fix(es): In PHP versions 8.1.* before 8.1.30, 8.2.* before 8.2.24, 8.3.* before 8.3.12, erroneous parsing of multipart form data contained in an HTTP POST request could lead to legitimate data not being processed. This could lead to malicious attacker able to control part of the submitted data being able to exclude portion of other data, potentially…

Withdrawn: UBUNTU-CVE-2024-8926

Withdrawn by the publisher.

Affected: Ubuntu:Pro:14.04:LTS: php5, Ubuntu:Pro:16.04:LTS: php7.0, Ubuntu:Pro:18.04:LTS: php7.2, Ubuntu:20.04:LTS: php7.4, Ubuntu:22.04:LTS: php8.1, Ubuntu:24.04:LTS: php8.3

[Bypass of CVE-2024-4577, Parameter Injection Vulnerability]

WID-SEC-W-2024-2230 — PHP: Mehrere Schwachstellen

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in PHP ausnutzen, um beliebigen Programmcode auszuführen, Informationen preiszugeben und andere nicht spezifizierte Angriffe durchzuführen.