Количество 11
Количество 11

BDU:2022-02645
Уязвимость функции ziparchive::extractto интерпретатора языка программирования PHP , связанная с недостатками ограничения имени пути к каталогу, позволяющая нарушителю создать произвольные каталоги

CVE-2014-9767
Directory traversal vulnerability in the ZipArchive::extractTo function in ext/zip/php_zip.c in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13 and ext/zip/ext_zip.cpp in HHVM before 3.12.1 allows remote attackers to create arbitrary empty directories via a crafted ZIP archive.

CVE-2014-9767
Directory traversal vulnerability in the ZipArchive::extractTo function in ext/zip/php_zip.c in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13 and ext/zip/ext_zip.cpp in HHVM before 3.12.1 allows remote attackers to create arbitrary empty directories via a crafted ZIP archive.

CVE-2014-9767
Directory traversal vulnerability in the ZipArchive::extractTo function in ext/zip/php_zip.c in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13 and ext/zip/ext_zip.cpp in HHVM before 3.12.1 allows remote attackers to create arbitrary empty directories via a crafted ZIP archive.
CVE-2014-9767
Directory traversal vulnerability in the ZipArchive::extractTo functio ...
GHSA-4gmr-f4gg-2jhp
Directory traversal vulnerability in the ZipArchive::extractTo function in ext/zip/php_zip.c in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13 and ext/zip/ext_zip.cpp in HHVM before 3.12.1 allows remote attackers to create arbitrary empty directories via a crafted ZIP archive.

openSUSE-SU-2016:1173-1
Security update for php5

SUSE-SU-2016:1166-1
Security update for php5

SUSE-SU-2016:1145-1
Security update for php53

SUSE-SU-2016:1581-1
Security update for php53

SUSE-SU-2016:1638-1
Security update for php53
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
---|---|---|---|---|
![]() | BDU:2022-02645 Уязвимость функции ziparchive::extractto интерпретатора языка программирования PHP , связанная с недостатками ограничения имени пути к каталогу, позволяющая нарушителю создать произвольные каталоги | CVSS3: 4.3 | 0% Низкий | около 9 лет назад |
![]() | CVE-2014-9767 Directory traversal vulnerability in the ZipArchive::extractTo function in ext/zip/php_zip.c in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13 and ext/zip/ext_zip.cpp in HHVM before 3.12.1 allows remote attackers to create arbitrary empty directories via a crafted ZIP archive. | CVSS3: 4.3 | 0% Низкий | около 9 лет назад |
![]() | CVE-2014-9767 Directory traversal vulnerability in the ZipArchive::extractTo function in ext/zip/php_zip.c in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13 and ext/zip/ext_zip.cpp in HHVM before 3.12.1 allows remote attackers to create arbitrary empty directories via a crafted ZIP archive. | CVSS2: 4.3 | 0% Низкий | почти 10 лет назад |
![]() | CVE-2014-9767 Directory traversal vulnerability in the ZipArchive::extractTo function in ext/zip/php_zip.c in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13 and ext/zip/ext_zip.cpp in HHVM before 3.12.1 allows remote attackers to create arbitrary empty directories via a crafted ZIP archive. | CVSS3: 4.3 | 0% Низкий | около 9 лет назад |
CVE-2014-9767 Directory traversal vulnerability in the ZipArchive::extractTo functio ... | CVSS3: 4.3 | 0% Низкий | около 9 лет назад | |
GHSA-4gmr-f4gg-2jhp Directory traversal vulnerability in the ZipArchive::extractTo function in ext/zip/php_zip.c in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13 and ext/zip/ext_zip.cpp in HHVM before 3.12.1 allows remote attackers to create arbitrary empty directories via a crafted ZIP archive. | CVSS3: 4.3 | 0% Низкий | около 3 лет назад | |
![]() | openSUSE-SU-2016:1173-1 Security update for php5 | около 9 лет назад | ||
![]() | SUSE-SU-2016:1166-1 Security update for php5 | около 9 лет назад | ||
![]() | SUSE-SU-2016:1145-1 Security update for php53 | около 9 лет назад | ||
![]() | SUSE-SU-2016:1581-1 Security update for php53 | около 9 лет назад | ||
![]() | SUSE-SU-2016:1638-1 Security update for php53 | около 9 лет назад |
Уязвимостей на страницу