oval:org.mitre.oval:def:12620

Definition Id: oval:org.mitre.oval:def:12620

Oval ID:	oval:org.mitre.oval:def:12620
Title:	SQL Injection vulnerability in PHP 5.3.2 and 5.3.3, when the MySQLi extension is used.
Description:	The set_magic_quotes_runtime function in PHP 5.3.2 and 5.3.3, when the MySQLi extension is used, does not properly interact with use of the mysqli_fetch_assoc function, which might make it easier for context-dependent attackers to conduct SQL injection attacks via crafted input that had been properly handled in earlier PHP versions.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2010-4700	Version:	3
Platform(s):	Microsoft Windows 2000 Microsoft Windows 7 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Vista Microsoft Windows XP	Product(s):	PHP
Definition Synopsis:
PHP is installed AND Check if the version of PHP is equal to 5.3.2 or equal to 5.3.3

Definition Id: oval:org.mitre.oval:def:12410

Oval ID:	oval:org.mitre.oval:def:12410
Title:	PHP is installed
Description:	PHP is installed
Family:	windows	Class:	inventory
Reference(s):	cpe:/a:php:php	Version:	4
Platform(s):	Microsoft Windows 2000 Microsoft Windows 7 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Vista Microsoft Windows XP	Product(s):	PHP
Definition Synopsis:
Check if PHP is installed AND Check if PHP lower versions are installed
Referenced By:
oval:org.mitre.oval:def:12620