Описание
Format string vulnerability in the error-reporting feature in the mysqli extension in PHP 5.1.0 and 5.1.1 might allow remote attackers to execute arbitrary code via format string specifiers in MySQL error messages.
Format string vulnerability in the error-reporting feature in the mysqli extension in PHP 5.1.0 and 5.1.1 might allow remote attackers to execute arbitrary code via format string specifiers in MySQL error messages.
Ссылки
- https://nvd.nist.gov/vuln/detail/CVE-2006-0200
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24095
- http://secunia.com/advisories/18431
- http://securityreason.com/securityalert/337
- http://securitytracker.com/id?1015485
- http://www.hardened-php.net/advisory_022006.113.html
- http://www.php.net/release_5_1_2.php
- http://www.securityfocus.com/archive/1/421705/100/0/threaded
- http://www.securityfocus.com/bid/16219
- http://www.vupen.com/english/advisories/2006/0177
- http://www.vupen.com/english/advisories/2006/0369
Связанные уязвимости
Format string vulnerability in the error-reporting feature in the mysqli extension in PHP 5.1.0 and 5.1.1 might allow remote attackers to execute arbitrary code via format string specifiers in MySQL error messages.
Format string vulnerability in the error-reporting feature in the mysqli extension in PHP 5.1.0 and 5.1.1 might allow remote attackers to execute arbitrary code via format string specifiers in MySQL error messages.
Format string vulnerability in the error-reporting feature in the mysq ...