holas, bueno miren, ando tratando de desfacear una web en un host gratuito, scaneando las vulneravilidades con el SSS encontro unas 40 vulnerabilidades mas o menos, entre otros:
PHP Apache 2 Local Denial of Service Vulnerability
PHP array_pad() Integer Overflow Memory Corruption Vulnerability
PHP DLOpen Arbitrary Web Server Process Memory Vulnerability
PHP emalloc() Unspecified Integer Overflow Memory Corruption Vulnerability
PHP Error Message Cross-Site Scripting Vulnerability
PHP File Upload GLOBAL Variable Overwrite Vulnerability
PHP Glob Function Local Information Disclosure Vulnerability
PHP Group Exif Module IFD Nesting Denial Of Service Vulnerability
PHP Group Exif Module IFD Tag Integer Overflow Vulnerability
PHP Group PHP Image File Format Remote Denial Of Service Vulnerability
PHP Group PHP Multiple Unspecified Vulnerabilities
PHP Group PHP Remote JPEG File Format Remote Denial Of Service
PHP Html_Entity_Decode() Information Disclosure Vulnerability
PHP Ini_Restore() Safe_Mode and Open_Basedir Restriction Bypass
PHP Input Ouput Wrapper Remote Include Function Command Execution Weakness
PHP memory_limit Remote Code Execution Vulnerability
PHP Multiple Input Validation Vulnerabilities
PHP Multiple Safe_Mode and Open_Basedir Restriction Bypass Vulnerabilities
PHP Multiple Security Bypass Vulnerabilities
PHP Multiple Unspecified Vulnerabilities
PHP MySQL_Connect Remote Buffer Overflow Vulnerability
PHP openlog() Buffer Overflow Vulnerability
PHP Parse_Str Register_Globals Activation Weakness
PHP PHPInfo Cross-Site Scripting Vulnerability
PHP PHPInfo Large Input Cross-Site Scripting Vulnerability
PHP Session Handling Local Session Hijacking Vulnerability
PHP socket_iovec_alloc() Integer Overflow Vulnerability
PHP socket_recv() Signed Integer Memory Corruption Vulnerability
PHP socket_recvfrom() Signed Integer Memory Corruption Vulnerability
PHP STR_Repeat Boundary Condition Error Vulnerability
PHP Strip_Tags() Function Bypass Vulnerability
PHP Symbolic Link Open_Basedir Bypass Vulnerability
PHP Transparent Session ID Cross Site Scripting Vulnerability
PHP ZendEngine ECalloc Integer Overflow Vulnerability
PHP4 Base64_Encode() Integer Overflow Vulnerability
PHP4 Multiple Vulnerabilities
PHP4 Readfile Denial Of Service Vulnerability
e probado muchos de esos y no funcan, mas otra importante cantidad donde en el securityfocus me tira "Currently we are not aware of any exploits for this issue."
alguien me recomienda cual y como usar alguno de estos y q funcione, porq dudo mucho q una web con mas de 40 vulnerabilidades no se le pueda hacer nada.
muchas gracias
Autor