Description

In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, a hostile MySQL server can cause the client to disclose the content of its heap containing data from other SQL requests and possible other data belonging to different users of the same server.

Remediation

References

CVE-2024-8929

Related Vulnerabilities

Internet Information Services CVE-2006-6578 Vulnerability (CVE-2006-6578)

WordPress Plugin Free Booking for Hotels, Restaurant and Car Rental-eaSYNC Arbitrary File Upload (1.1.15)

e107 Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2018-17081)

WordPress Plugin Post SMTP-WP SMTP with Email Logs & Mobile App for Failure Alerts-Any SMTP Plus Gmail SMTP, Office 365, Brevo, Mailgun, Amazon SES, Postmark SQL Injection (2.9.3)

phpBB Weak Password Recovery Mechanism for Forgotten Password Vulnerability (CVE-2026-29199)

Severity

Medium

Classification

CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

Tags

Missing Update Known Vulnerabilities CWE-125 CVE-2024-8929