PHPRunner Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in PHPRunner version 10.1. This vulnerability allows local attackers to crash the application by entering an excessively long string, specifically 10,000 characters, in the dashboard name field during the creation of a dashboard. The application crash occurs as a result of this buffer overflow.

Impact

Exploiting this vulnerability leads to a crash of the PHPRunner application, causing a denial-of-service condition where the application becomes unresponsive or unavailable.

Reproduction

To reproduce this vulnerability, create a dashboard in PHPRunner 10.1. During the dashboard creation process, paste a 10,000-character string into the 'Name' field. After clicking 'Ok', the application will crash.