CVE-2011-2202
The rfc1867_post_handler function in main/rfc1867.c in PHP before 5.3.7 does not properly...
6.4 MediumPublic exploitFix available
CVE-2011-2202 is a medium vulnerability (CVSS 6.4) in Php, published June 16, 2011. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 19.7%, the 97th percentile. Fixed in php5 5.2.6.dfsg.1-1+lenny12.
The rfc1867_post_handler function in main/rfc1867.c in PHP before 5.3.7 does not properly restrict filenames in multipart/form-data POST requests, which allows remote attackers to conduct absolute path traversal attacks, and possibly create or overwrite arbitrary files, via a crafted upload request, related to a "file path injection vulnerability."
Exploit likelihood
19.7%Up 7.2 points since Feb 4, 2022
What each source reports
NVD Score used
The rfc1867_post_handler function in main/rfc1867.c in PHP before 5.3.7 does not properly restrict filenames in multipart/form-data POST requests, which allows remote attackers to conduct absolute path traversal attacks, and possibly create or overwrite arbitrary files, via a crafted upload request, related to a "file path injection vulnerability."
- Record
CVE-2011-2202- CVSS 2.0
- 6.4 Medium
AV:N/AC:L/Au:N/C:N/I:P/A:P - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
The rfc1867_post_handler function in main/rfc1867.c in PHP before 5.3.7 does not properly restrict filenames in multipart/form-data POST requests, which allows remote attackers to conduct absolute path traversal attacks, and possibly create or overwrite arbitrary files, via a crafted upload request, related to a "file path injection vulnerability."
- Record
CVE-2011-2202- Updated
- 2026-11-02
EUVDEUVD-2011-2192 No score
The rfc1867_post_handler function in main/rfc1867.c in PHP before 5.3.7 does not properly restrict filenames in multipart/form-data POST requests, which allows remote attackers to conduct absolute path traversal attacks, and possibly create or overwrite arbitrary files, via a crafted upload request, related to a "file path injection vulnerability."
- Record
EUVD-2011-2192- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-6qfq-jp45-c2jc No score
The rfc1867_post_handler function in main/rfc1867.c in PHP before 5.3.7 does not properly...
The rfc1867_post_handler function in main/rfc1867.c in PHP before 5.3.7 does not properly restrict filenames in multipart/form-data POST requests, which allows remote attackers to conduct absolute path traversal attacks, and possibly create or overwrite arbitrary files, via a crafted upload request, related to a "file path injection vulnerability."
- Record
GHSA-6qfq-jp45-c2jc- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10290-1 No score
apache2-mod_php7-7.0.14-1.4 on GA media
These are all security issues fixed in the apache2-mod_php7-7.0.14-1.4 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10290-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10344-1 No score
apache2-mod_php5-5.6.28-1.1 on GA media
These are all security issues fixed in the apache2-mod_php5-5.6.28-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10344-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:11169-1 No score
php8-8.0.11-1.1 on GA media
These are all security issues fixed in the php8-8.0.11-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:11169-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
php5Debian:5.0 |
before 5.2.6.dfsg.1-1+lenny12, plus listed versions 5.2.6.dfsg.1-1+lenny105.2.6.dfsg.1-1+lenny115.2.6.dfsg.1-1+lenny25.2.6.dfsg.1-1+lenny35.2.6.dfsg.1-1+lenny45.2.6.dfsg.1-1+lenny65.2.6.dfsg.1-1+lenny85.2.6.dfsg.1-1+lenny9 |
5.2.6.dfsg.1-1+lenny12 |
php5Debian:6.0 |
before 5.3.3-7+squeeze3, plus listed versions 5.3.3-75.3.3-7+squeeze15.3.3-7+squeeze2 |
5.3.3-7+squeeze3 |
php53Red Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-bcmathRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-cliRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-commonRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-dbaRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-debuginfoRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-develRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-gdRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
Show 166 moreShow less
| Package | Affected | Fixed |
|---|---|---|
php53-imapRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-intlRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-ldapRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-mbstringRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-mysqlRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-odbcRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-pdoRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-pgsqlRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-processRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-pspellRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-snmpRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-soapRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-xmlRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-xmlrpcRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53Red Hat:enterprise_linux:5::server |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-bcmathRed Hat:enterprise_linux:5::server |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-cliRed Hat:enterprise_linux:5::server |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-commonRed Hat:enterprise_linux:5::server |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-dbaRed Hat:enterprise_linux:5::server |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-debuginfoRed Hat:enterprise_linux:5::server |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-develRed Hat:enterprise_linux:5::server |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-gdRed Hat:enterprise_linux:5::server |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-imapRed Hat:enterprise_linux:5::server |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-intlRed Hat:enterprise_linux:5::server |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-ldapRed Hat:enterprise_linux:5::server |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-mbstringRed Hat:enterprise_linux:5::server |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-mysqlRed Hat:enterprise_linux:5::server |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-odbcRed Hat:enterprise_linux:5::server |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-pdoRed Hat:enterprise_linux:5::server |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-pgsqlRed Hat:enterprise_linux:5::server |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-processRed Hat:enterprise_linux:5::server |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-pspellRed Hat:enterprise_linux:5::server |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-snmpRed Hat:enterprise_linux:5::server |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-soapRed Hat:enterprise_linux:5::server |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-xmlRed Hat:enterprise_linux:5::server |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-xmlrpcRed Hat:enterprise_linux:5::server |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
phpRed Hat:enterprise_linux:6::server |
before 0:5.3.3-3.el6_1.3 | 0:5.3.3-3.el6_1.3 |
php-cliRed Hat:enterprise_linux:6::server |
before 0:5.3.3-3.el6_1.3 | 0:5.3.3-3.el6_1.3 |
php-commonRed Hat:enterprise_linux:6::server |
before 0:5.3.3-3.el6_1.3 | 0:5.3.3-3.el6_1.3 |
php-debuginfoRed Hat:enterprise_linux:6::server |
before 0:5.3.3-3.el6_1.3 | 0:5.3.3-3.el6_1.3 |
php-gdRed Hat:enterprise_linux:6::server |
before 0:5.3.3-3.el6_1.3 | 0:5.3.3-3.el6_1.3 |
php-ldapRed Hat:enterprise_linux:6::server |
before 0:5.3.3-3.el6_1.3 | 0:5.3.3-3.el6_1.3 |
php-mysqlRed Hat:enterprise_linux:6::server |
before 0:5.3.3-3.el6_1.3 | 0:5.3.3-3.el6_1.3 |
php-odbcRed Hat:enterprise_linux:6::server |
before 0:5.3.3-3.el6_1.3 | 0:5.3.3-3.el6_1.3 |
php-pdoRed Hat:enterprise_linux:6::server |
before 0:5.3.3-3.el6_1.3 | 0:5.3.3-3.el6_1.3 |
php-pgsqlRed Hat:enterprise_linux:6::server |
before 0:5.3.3-3.el6_1.3 | 0:5.3.3-3.el6_1.3 |
php-soapRed Hat:enterprise_linux:6::server |
before 0:5.3.3-3.el6_1.3 | 0:5.3.3-3.el6_1.3 |
php-xmlRed Hat:enterprise_linux:6::server |
before 0:5.3.3-3.el6_1.3 | 0:5.3.3-3.el6_1.3 |
php-xmlrpcRed Hat:enterprise_linux:6::server |
before 0:5.3.3-3.el6_1.3 | 0:5.3.3-3.el6_1.3 |
php-bcmathRed Hat:enterprise_linux:6::server |
before 0:5.3.3-3.el6_1.3 | 0:5.3.3-3.el6_1.3 |
php-dbaRed Hat:enterprise_linux:6::server |
before 0:5.3.3-3.el6_1.3 | 0:5.3.3-3.el6_1.3 |
php-develRed Hat:enterprise_linux:6::server |
before 0:5.3.3-3.el6_1.3 | 0:5.3.3-3.el6_1.3 |
php-embeddedRed Hat:enterprise_linux:6::server |
before 0:5.3.3-3.el6_1.3 | 0:5.3.3-3.el6_1.3 |
php-enchantRed Hat:enterprise_linux:6::server |
before 0:5.3.3-3.el6_1.3 | 0:5.3.3-3.el6_1.3 |
php-imapRed Hat:enterprise_linux:6::server |
before 0:5.3.3-3.el6_1.3 | 0:5.3.3-3.el6_1.3 |
php-intlRed Hat:enterprise_linux:6::server |
before 0:5.3.3-3.el6_1.3 | 0:5.3.3-3.el6_1.3 |
php-mbstringRed Hat:enterprise_linux:6::server |
before 0:5.3.3-3.el6_1.3 | 0:5.3.3-3.el6_1.3 |
php-processRed Hat:enterprise_linux:6::server |
before 0:5.3.3-3.el6_1.3 | 0:5.3.3-3.el6_1.3 |
php-pspellRed Hat:enterprise_linux:6::server |
before 0:5.3.3-3.el6_1.3 | 0:5.3.3-3.el6_1.3 |
php-recodeRed Hat:enterprise_linux:6::server |
before 0:5.3.3-3.el6_1.3 | 0:5.3.3-3.el6_1.3 |
php-snmpRed Hat:enterprise_linux:6::server |
before 0:5.3.3-3.el6_1.3 | 0:5.3.3-3.el6_1.3 |
php-tidyRed Hat:enterprise_linux:6::server |
before 0:5.3.3-3.el6_1.3 | 0:5.3.3-3.el6_1.3 |
php-ztsRed Hat:enterprise_linux:6::server |
before 0:5.3.3-3.el6_1.3 | 0:5.3.3-3.el6_1.3 |
phpRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-27.el5_7.4 | 0:5.1.6-27.el5_7.4 |
php-bcmathRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-27.el5_7.4 | 0:5.1.6-27.el5_7.4 |
php-cliRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-27.el5_7.4 | 0:5.1.6-27.el5_7.4 |
php-commonRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-27.el5_7.4 | 0:5.1.6-27.el5_7.4 |
php-dbaRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-27.el5_7.4 | 0:5.1.6-27.el5_7.4 |
php-debuginfoRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-27.el5_7.4 | 0:5.1.6-27.el5_7.4 |
php-develRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-27.el5_7.4 | 0:5.1.6-27.el5_7.4 |
php-gdRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-27.el5_7.4 | 0:5.1.6-27.el5_7.4 |
php-imapRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-27.el5_7.4 | 0:5.1.6-27.el5_7.4 |
php-ldapRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-27.el5_7.4 | 0:5.1.6-27.el5_7.4 |
php-mbstringRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-27.el5_7.4 | 0:5.1.6-27.el5_7.4 |
php-mysqlRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-27.el5_7.4 | 0:5.1.6-27.el5_7.4 |
php-ncursesRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-27.el5_7.4 | 0:5.1.6-27.el5_7.4 |
php-odbcRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-27.el5_7.4 | 0:5.1.6-27.el5_7.4 |
php-pdoRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-27.el5_7.4 | 0:5.1.6-27.el5_7.4 |
php-pgsqlRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-27.el5_7.4 | 0:5.1.6-27.el5_7.4 |
php-snmpRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-27.el5_7.4 | 0:5.1.6-27.el5_7.4 |
php-soapRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-27.el5_7.4 | 0:5.1.6-27.el5_7.4 |
php-xmlRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-27.el5_7.4 | 0:5.1.6-27.el5_7.4 |
php-xmlrpcRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-27.el5_7.4 | 0:5.1.6-27.el5_7.4 |
phpRed Hat:enterprise_linux:5::server |
before 0:5.1.6-27.el5_7.4 | 0:5.1.6-27.el5_7.4 |
php-bcmathRed Hat:enterprise_linux:5::server |
before 0:5.1.6-27.el5_7.4 | 0:5.1.6-27.el5_7.4 |
php-cliRed Hat:enterprise_linux:5::server |
before 0:5.1.6-27.el5_7.4 | 0:5.1.6-27.el5_7.4 |
php-commonRed Hat:enterprise_linux:5::server |
before 0:5.1.6-27.el5_7.4 | 0:5.1.6-27.el5_7.4 |
php-dbaRed Hat:enterprise_linux:5::server |
before 0:5.1.6-27.el5_7.4 | 0:5.1.6-27.el5_7.4 |
php-debuginfoRed Hat:enterprise_linux:5::server |
before 0:5.1.6-27.el5_7.4 | 0:5.1.6-27.el5_7.4 |
php-develRed Hat:enterprise_linux:5::server |
before 0:5.1.6-27.el5_7.4 | 0:5.1.6-27.el5_7.4 |
php-gdRed Hat:enterprise_linux:5::server |
before 0:5.1.6-27.el5_7.4 | 0:5.1.6-27.el5_7.4 |
php-imapRed Hat:enterprise_linux:5::server |
before 0:5.1.6-27.el5_7.4 | 0:5.1.6-27.el5_7.4 |
php-ldapRed Hat:enterprise_linux:5::server |
before 0:5.1.6-27.el5_7.4 | 0:5.1.6-27.el5_7.4 |
php-mbstringRed Hat:enterprise_linux:5::server |
before 0:5.1.6-27.el5_7.4 | 0:5.1.6-27.el5_7.4 |
php-mysqlRed Hat:enterprise_linux:5::server |
before 0:5.1.6-27.el5_7.4 | 0:5.1.6-27.el5_7.4 |
php-ncursesRed Hat:enterprise_linux:5::server |
before 0:5.1.6-27.el5_7.4 | 0:5.1.6-27.el5_7.4 |
php-odbcRed Hat:enterprise_linux:5::server |
before 0:5.1.6-27.el5_7.4 | 0:5.1.6-27.el5_7.4 |
php-pdoRed Hat:enterprise_linux:5::server |
before 0:5.1.6-27.el5_7.4 | 0:5.1.6-27.el5_7.4 |
php-pgsqlRed Hat:enterprise_linux:5::server |
before 0:5.1.6-27.el5_7.4 | 0:5.1.6-27.el5_7.4 |
php-snmpRed Hat:enterprise_linux:5::server |
before 0:5.1.6-27.el5_7.4 | 0:5.1.6-27.el5_7.4 |
php-soapRed Hat:enterprise_linux:5::server |
before 0:5.1.6-27.el5_7.4 | 0:5.1.6-27.el5_7.4 |
php-xmlRed Hat:enterprise_linux:5::server |
before 0:5.1.6-27.el5_7.4 | 0:5.1.6-27.el5_7.4 |
php-xmlrpcRed Hat:enterprise_linux:5::server |
before 0:5.1.6-27.el5_7.4 | 0:5.1.6-27.el5_7.4 |
phpRed Hat:enterprise_linux:4::as |
before 0:4.3.9-3.35 | 0:4.3.9-3.35 |
php-debuginfoRed Hat:enterprise_linux:4::as |
before 0:4.3.9-3.35 | 0:4.3.9-3.35 |
php-develRed Hat:enterprise_linux:4::as |
before 0:4.3.9-3.35 | 0:4.3.9-3.35 |
php-domxmlRed Hat:enterprise_linux:4::as |
before 0:4.3.9-3.35 | 0:4.3.9-3.35 |
php-gdRed Hat:enterprise_linux:4::as |
before 0:4.3.9-3.35 | 0:4.3.9-3.35 |
php-imapRed Hat:enterprise_linux:4::as |
before 0:4.3.9-3.35 | 0:4.3.9-3.35 |
php-ldapRed Hat:enterprise_linux:4::as |
before 0:4.3.9-3.35 | 0:4.3.9-3.35 |
php-mbstringRed Hat:enterprise_linux:4::as |
before 0:4.3.9-3.35 | 0:4.3.9-3.35 |
php-mysqlRed Hat:enterprise_linux:4::as |
before 0:4.3.9-3.35 | 0:4.3.9-3.35 |
php-ncursesRed Hat:enterprise_linux:4::as |
before 0:4.3.9-3.35 | 0:4.3.9-3.35 |
php-odbcRed Hat:enterprise_linux:4::as |
before 0:4.3.9-3.35 | 0:4.3.9-3.35 |
php-pearRed Hat:enterprise_linux:4::as |
before 0:4.3.9-3.35 | 0:4.3.9-3.35 |
php-pgsqlRed Hat:enterprise_linux:4::as |
before 0:4.3.9-3.35 | 0:4.3.9-3.35 |
php-snmpRed Hat:enterprise_linux:4::as |
before 0:4.3.9-3.35 | 0:4.3.9-3.35 |
php-xmlrpcRed Hat:enterprise_linux:4::as |
before 0:4.3.9-3.35 | 0:4.3.9-3.35 |
phpRed Hat:enterprise_linux:4::desktop |
before 0:4.3.9-3.35 | 0:4.3.9-3.35 |
php-debuginfoRed Hat:enterprise_linux:4::desktop |
before 0:4.3.9-3.35 | 0:4.3.9-3.35 |
php-develRed Hat:enterprise_linux:4::desktop |
before 0:4.3.9-3.35 | 0:4.3.9-3.35 |
php-domxmlRed Hat:enterprise_linux:4::desktop |
before 0:4.3.9-3.35 | 0:4.3.9-3.35 |
php-gdRed Hat:enterprise_linux:4::desktop |
before 0:4.3.9-3.35 | 0:4.3.9-3.35 |
php-imapRed Hat:enterprise_linux:4::desktop |
before 0:4.3.9-3.35 | 0:4.3.9-3.35 |
php-ldapRed Hat:enterprise_linux:4::desktop |
before 0:4.3.9-3.35 | 0:4.3.9-3.35 |
php-mbstringRed Hat:enterprise_linux:4::desktop |
before 0:4.3.9-3.35 | 0:4.3.9-3.35 |
php-mysqlRed Hat:enterprise_linux:4::desktop |
before 0:4.3.9-3.35 | 0:4.3.9-3.35 |
php-ncursesRed Hat:enterprise_linux:4::desktop |
before 0:4.3.9-3.35 | 0:4.3.9-3.35 |
php-odbcRed Hat:enterprise_linux:4::desktop |
before 0:4.3.9-3.35 | 0:4.3.9-3.35 |
php-pearRed Hat:enterprise_linux:4::desktop |
before 0:4.3.9-3.35 | 0:4.3.9-3.35 |
php-pgsqlRed Hat:enterprise_linux:4::desktop |
before 0:4.3.9-3.35 | 0:4.3.9-3.35 |
php-snmpRed Hat:enterprise_linux:4::desktop |
before 0:4.3.9-3.35 | 0:4.3.9-3.35 |
php-xmlrpcRed Hat:enterprise_linux:4::desktop |
before 0:4.3.9-3.35 | 0:4.3.9-3.35 |
phpRed Hat:enterprise_linux:4::es |
before 0:4.3.9-3.35 | 0:4.3.9-3.35 |
php-debuginfoRed Hat:enterprise_linux:4::es |
before 0:4.3.9-3.35 | 0:4.3.9-3.35 |
php-develRed Hat:enterprise_linux:4::es |
before 0:4.3.9-3.35 | 0:4.3.9-3.35 |
php-domxmlRed Hat:enterprise_linux:4::es |
before 0:4.3.9-3.35 | 0:4.3.9-3.35 |
php-gdRed Hat:enterprise_linux:4::es |
before 0:4.3.9-3.35 | 0:4.3.9-3.35 |
php-imapRed Hat:enterprise_linux:4::es |
before 0:4.3.9-3.35 | 0:4.3.9-3.35 |
php-ldapRed Hat:enterprise_linux:4::es |
before 0:4.3.9-3.35 | 0:4.3.9-3.35 |
php-mbstringRed Hat:enterprise_linux:4::es |
before 0:4.3.9-3.35 | 0:4.3.9-3.35 |
php-mysqlRed Hat:enterprise_linux:4::es |
before 0:4.3.9-3.35 | 0:4.3.9-3.35 |
php-ncursesRed Hat:enterprise_linux:4::es |
before 0:4.3.9-3.35 | 0:4.3.9-3.35 |
php-odbcRed Hat:enterprise_linux:4::es |
before 0:4.3.9-3.35 | 0:4.3.9-3.35 |
php-pearRed Hat:enterprise_linux:4::es |
before 0:4.3.9-3.35 | 0:4.3.9-3.35 |
php-pgsqlRed Hat:enterprise_linux:4::es |
before 0:4.3.9-3.35 | 0:4.3.9-3.35 |
php-snmpRed Hat:enterprise_linux:4::es |
before 0:4.3.9-3.35 | 0:4.3.9-3.35 |
php-xmlrpcRed Hat:enterprise_linux:4::es |
before 0:4.3.9-3.35 | 0:4.3.9-3.35 |
phpRed Hat:enterprise_linux:4::ws |
before 0:4.3.9-3.35 | 0:4.3.9-3.35 |
php-debuginfoRed Hat:enterprise_linux:4::ws |
before 0:4.3.9-3.35 | 0:4.3.9-3.35 |
php-develRed Hat:enterprise_linux:4::ws |
before 0:4.3.9-3.35 | 0:4.3.9-3.35 |
php-domxmlRed Hat:enterprise_linux:4::ws |
before 0:4.3.9-3.35 | 0:4.3.9-3.35 |
php-gdRed Hat:enterprise_linux:4::ws |
before 0:4.3.9-3.35 | 0:4.3.9-3.35 |
php-imapRed Hat:enterprise_linux:4::ws |
before 0:4.3.9-3.35 | 0:4.3.9-3.35 |
php-ldapRed Hat:enterprise_linux:4::ws |
before 0:4.3.9-3.35 | 0:4.3.9-3.35 |
php-mbstringRed Hat:enterprise_linux:4::ws |
before 0:4.3.9-3.35 | 0:4.3.9-3.35 |
php-mysqlRed Hat:enterprise_linux:4::ws |
before 0:4.3.9-3.35 | 0:4.3.9-3.35 |
php-ncursesRed Hat:enterprise_linux:4::ws |
before 0:4.3.9-3.35 | 0:4.3.9-3.35 |
php-odbcRed Hat:enterprise_linux:4::ws |
before 0:4.3.9-3.35 | 0:4.3.9-3.35 |
php-pearRed Hat:enterprise_linux:4::ws |
before 0:4.3.9-3.35 | 0:4.3.9-3.35 |
php-pgsqlRed Hat:enterprise_linux:4::ws |
before 0:4.3.9-3.35 | 0:4.3.9-3.35 |
php-snmpRed Hat:enterprise_linux:4::ws |
before 0:4.3.9-3.35 | 0:4.3.9-3.35 |
php-xmlrpcRed Hat:enterprise_linux:4::ws |
before 0:4.3.9-3.35 | 0:4.3.9-3.35 |
php7openSUSE:Tumbleweed |
before 7.0.14-1.4 | 7.0.14-1.4 |
php5openSUSE:Tumbleweed |
before 5.6.28-1.1 | 5.6.28-1.1 |
php8openSUSE:Tumbleweed |
before 8.0.11-1.1 | 8.0.11-1.1 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | PHP 5.3.6 - Security Bypass | 2011-06-14 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, Exploit-DB, GitHub Advisories, NVD, OSV |
References
securityfocus.com/bid/48259
svn.php.net/viewvc/php/php-src/branches/PHP_5_3/main/rfc1867.c?r1=312103&r2=312102&pathrev=312103
marc.info?l=bugtraq&m=133469208622507&w=2
support.apple.com/kb/HT5130
Show 183 moreShow less
securitytracker.com/id?1025659
exchange.xforce.ibmcloud.com/vulnerabilities/67999
mandriva.com/security/advisories?name=MDVSA-2011:165
secunia.com/advisories/44874
debian.org/security/2011/dsa-2266
lists.apple.com/archives/security-announce/2012/Feb/msg00000.html
openwall.com/lists/oss-security/2011/06/13/15
bugs.php.net/bug.php?id=54939
redhat.com/support/errata/RHSA-2011-1423.html
php.net/ChangeLog-5.php
rhn.redhat.com/errata/RHSA-2012-0071.html
pastebin.com/1edSuSVN
nvd.nist.gov/vuln/detail/CVE-2011-2202
github.com/advisories/GHSA-6qfq-jp45-c2jc
access.redhat.com/errata/RHSA-2011:1423
bugzilla.redhat.com/show_bug.cgi?id=680972
security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_1423.json
cve.org/CVERecord?id=CVE-2011-0708
suse.com/security/cve/CVE-2006-7243