php4 vulnerabilities (Debian)
35 vulnerabilities.
-
php4Debian The escapeshellcmd API function in PHP before 5.2.6 has unknown impact and context-dependent... 10.0 High -
php4Debian Multiple integer overflows in PHP 4 before 4.4.8, and PHP 5 before 5.2.4, allow remote attackers... 7.5 High -
php4Debian The wordwrap function in PHP 4 before 4.4.8, and PHP 5 before 5.2.4, does not properly use the... 5.0 Medium -
php4Debian The glob function in PHP 5.2.3 allows context-dependent attackers to cause a denial of service... 6.8 Medium -
php4Debian The session_start function in ext/session in PHP 4.x up to 4.4.7 and 5.x up to 5.2.3 allows... 4.3 Medium -
php4Debian CRLF injection vulnerability in the ftp_putcmd function in PHP before 4.4.7, and 5.x before 5.2.2... 2.6 Low -
php4Debian Buffer overflow in the bundled libxmlrpc library in PHP before 4.4.7, and 5.x before 5.2.2, has... 7.5 High -
php4Debian Integer overflow in the zip_read_entry function in PHP 4 before 4.4.5 allows remote attackers to... 7.5 High -
php4Debian CRLF injection vulnerability in the mail function in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5... 7.8 High -
php4Debian Double free vulnerability in the unserializer in PHP 4.4.5 and 4.4.6 allows context-dependent... 6.8 Medium -
php4Debian The mb_parse_str function in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 sets the internal... 6.8 Medium -
php4Debian Double free vulnerability in PHP before 4.4.7, and 5.x before 5.2.2, allows context-dependent... 6.8 Medium -
php4Debian The php_binary serialization handler in the session extension in PHP before 4.4.5, and 5.x before... 5.0 Medium -
php4Debian Integer overflow in PHP 4.4.4 and earlier allows remote context-dependent attackers to execute... 6.8 Medium -
php4Debian The zend_hash_init function in PHP 5 before 5.2.1 and PHP 4 before 4.4.5, when running on a 64... 4.3 Medium -
php4Debian Unspecified vulnerability in PHP before 5.2.1 allows attackers to "clobber" certain super-global... 10.0 High -
php4Debian Multiple format string vulnerabilities in PHP before 5.2.1 might allow attackers to execute... 7.5 High -
php4Debian The WDDX deserializer in the wddx extension in PHP 5 before 5.2.1 and PHP 4 before 4.4.5 does not... 5.0 Medium -
php4Debian Buffer underflow in PHP before 5.2.1 allows attackers to cause a denial of service via... 5.0 Medium -
php4Debian Multiple buffer overflows in PHP before 5.2.1 allow attackers to cause a denial of service and... 7.5 High -
php4Debian Buffer overflow in PHP before 5.2.0 allows remote attackers to execute arbitrary code via crafted... 7.5 High -
php4Debian Integer overflow in memory allocation routines in PHP before 5.1.6, when running on a 64-bit... 2.6 Low -
php4Debian Multiple heap-based buffer overflows in the (1) str_repeat and (2) wordwrap functions in ext... 9.3 High -
php4Debian zend_hash_del_key_or_index in zend_hash.c in PHP before 4.4.3 and 5.x before 5.1.3 can cause... 9.3 High -
php4Debian Multiple HTTP response splitting vulnerabilities in PHP 5.1.1 allow remote attackers to inject... 5.0 Medium -
php4Debian The exif_read_data function in the Exif module in PHP before 4.4.1 allows remote attackers to... 5.0 Medium -
php4Debian Eval injection vulnerability in PHPXMLRPC 1.1.1 and earlier (PEAR XML-RPC for PHP), as used in... 7.5 High -
php4Debian Eval injection vulnerability in PEAR XML_RPC 1.3.0 and earlier (aka XML-RPC or xmlrpc) and... 7.5 High -
php4Debian Race condition in shtool 2.0.1 and earlier allows local users to create or modify arbitrary files... 3.7 Low -
php4Debian The php_next_marker function in image.c for PHP 4.2.2, 4.3.9, 4.3.10 and 5.0.3, as reachable by... 5.0 Medium -
php4Debian The strip_tags function in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, does not filter null (\0)... 6.8 Medium -
php4Debian The memory_limit functionality in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, under certain... 5.1 Medium -
php4Debian Cross-site scripting (XSS) vulnerability in the transparent SID support capability for PHP before... 4.3 Medium -
php4Debian The mail function in PHP 4.x to 4.2.2 does not filter ASCII control characters from its arguments... 5.0 Medium -
php4Debian Argument injection vulnerability in the mail function for PHP 4.x to 4.2.2 may allow attackers to... 7.5 High