#48230 [Bgs]: xml_utf8_decode incorrectly decode

2009-05-11 Thread root at 80sec dot com
ID: 48230 User updated by: root at 80sec dot com Reported By: root at 80sec dot com Status: Bogus Bug Type: XML related Operating System: Linux/win PHP Version: 5.2.9 New Comment: chr(0xf0).chr(0xc0).chr(0xc0).chr(0xa7) is not a valid utf8 data

#48231 [NEW]: php create_function commond injection vulnerability

2009-05-10 Thread root at 80sec dot com
From: root at 80sec dot com Operating system: Linux/win PHP version: 5.2.9 PHP Bug Type: Unknown/Other Function Bug description: php create_function commond injection vulnerability Description: there is a commond injection in this function,you can EXECUTE your

#48230 [NEW]: xml_utf8_decode incorrectly decode

2009-05-10 Thread root at 80sec dot com
From: root at 80sec dot com Operating system: Linux/win PHP version: 5.2.9 PHP Bug Type: *XML functions Bug description: xml_utf8_decode incorrectly decode Description: xml_utf8_decode function incorrectly decode. Reproduce code: --- Expected

#48229 [NEW]: php mail function open_basedir bypass

2009-05-10 Thread root at 80sec dot com
From: root at 80sec dot com Operating system: linux PHP version: 5.2.9 PHP Bug Type: Safe Mode/open_basedir Bug description: php mail function open_basedir bypass Description: The mail function may bypass open_basedir or read/write arbitrary file. Reproduce