Skip to contentPhp vulnerabilities
Newest
- phpBuffer consumption vulnerability in the tempnam function in PHP 5.1.4 and 4.x before 4.4.3 allows...CVE-2006-26602.1 Low
- phpThe cURL library (libcurl) in PHP 4.4.2 and 5.1.4 allows attackers to bypass safe mode and read...CVE-2006-25632.1 Low
- php directory listing scriptCross-site scripting (XSS) vulnerability in index.php in Directory Listing Script allows remote...CVE-2006-24194.3 Medium
- phpThe substr_compare function in string.c in PHP 5.1.2 allows context-dependent attackers to cause...CVE-2006-19916.4 Medium
- phpInteger overflow in the wordwrap function in string.c in PHP 4.4.2 and 5.1.2 might allow context...CVE-2006-1990EPSS 10.6%5.0 Medium
- phpPHP 4.4.2 and 5.1.2 allows local users to cause a crash (segmentation fault) by defining and...CVE-2006-1549Public exploit2.1 Low
- phpThe copy function in file.c in PHP 4.4.2 and 5.1.2 allows local users to bypass safe mode and...CVE-2006-1608Public exploit2.1 Low
- phpDirectory traversal vulnerability in file.c in PHP 4.4.2 and 5.1.2 allows local users to bypass...CVE-2006-1494Public exploit2.6 Low
- phpCross-site scripting (XSS) vulnerability in phpinfo (info.c) in PHP 5.1.2 and 4.4.2 allows remote...CVE-2006-0996Public exploitEPSS 11.1%4.3 Medium
- php script indexSQL injection vulnerability in PHP Script Index allows remote attackers to execute arbitrary SQL...CVE-2006-15597.5 High
- php script indexCross-site scripting (XSS) vulnerability in search.php in PHP Script Index allows remote...CVE-2006-15586.8 Medium
- phpPHP before 5.1.3-RC1 might allow remote attackers to obtain portions of memory via crafted binary...CVE-2006-1490Public exploitEPSS 21.0%5.0 Medium
- phpThe c-client library 2000, 2001, or 2004 for PHP before 4.4.4 and 5.x before 5.1.5 do not check...CVE-2006-10179.3 High
- phpArgument injection vulnerability in certain PHP 3.x, 4.x, and 5.x applications, when used with...CVE-2006-1015Public exploitEPSS 12.4%6.4 Medium
- phpArgument injection vulnerability in certain PHP 4.x and 5.x applications, when used with sendmail...CVE-2006-1014Public exploit3.2 Low
- phpMultiple cross-site scripting (XSS) vulnerabilities in PHP 4.4.1 and 5.1.1, when display_errors...CVE-2006-02082.6 Low
- phpMultiple HTTP response splitting vulnerabilities in PHP 5.1.1 allow remote attackers to inject...CVE-2006-02075.0 Medium
- phpFormat string vulnerability in the error-reporting feature in the mysqli extension in PHP 5.1.0...CVE-2006-0200EPSS 20.0%9.3 High
- apache2triad, php pear +1 moreThe proxy server feature in go-pear.php in PHP PEAR 0.2.2, as used in Apache2Triad, allows remote...CVE-2006-01447.5 High
- phpStack-based buffer overflow in the create_named_pipe function in libmysql.c in PHP 4.3.10 and 4.4...CVE-2006-0097Public exploitEPSS 12.2%7.5 High
- php pearUnspecified vulnerability in PEAR installer 1.4.2 and earlier allows user-assisted attackers to...CVE-2005-41545.1 Medium
- phpCRLF injection vulnerability in the mb_send_mail function in PHP before 5.1.0 might allow remote...CVE-2005-38835.0 Medium
- phpThe exif_read_data function in the Exif module in PHP before 4.4.1 allows remote attackers to...CVE-2005-33535.0 Medium
- phpUnspecified vulnerability in PHP before 4.4.1, when using the virtual function on Apache 2,...CVE-2005-33927.5 High
- phpMultiple vulnerabilities in PHP before 4.4.1 allow remote attackers to bypass safe_mode and...CVE-2005-33917.5 High
- phpThe RFC1867 file upload feature in PHP 4.x up to 4.4.0 and 5.x up to 5.0.5, when register_globals...CVE-2005-3390Public exploitEPSS 65.5%7.5 High
- phpThe parse_str function in PHP 4.x up to 4.4.0 and 5.x up to 5.0.5, when called with only one...CVE-2005-33895.0 Medium
- phpCross-site scripting (XSS) vulnerability in the phpinfo function in PHP 4.x up to 4.4.0 and 5.x...CVE-2005-3388Public exploitEPSS 48.9%4.3 Medium
- phpThe apache2handler SAPI (sapi_apache2.c) in the Apache module (mod_php) for PHP 5.x before 5.1.0...CVE-2005-33192.1 Low
- phpfopen_wrappers.c in PHP 4.4.0, and possibly other versions, does not properly restrict access to...CVE-2005-30542.1 Low
- drupal, gggeek phpxmlrpc, debian linux +2 more +4 moreEval injection vulnerability in PEAR XML_RPC 1.3.0 and earlier (aka XML-RPC or xmlrpc) and...CVE-2005-1921Public exploitFix availableEPSS 79.1%7.5 High
- php, apple mac os x, mac os x server +2 more +4 moreexif.c in PHP before 4.3.11 allows remote attackers to cause a denial of service (memory...CVE-2005-10435.0 Medium
- phpInteger overflow in the exif_process_IFD_TAG function in exif.c in PHP before 4.3.11 may allow...CVE-2005-10427.5 High
- phpThe php_next_marker function in image.c for PHP 4.2.2, 4.3.9, 4.3.10 and 5.0.3, as reachable by...CVE-2005-0525Fix available5.0 Medium
- phpThe php_handle_iff function in image.c for PHP 4.2.2, 4.3.9, 4.3.10 and 5.0.3, as reachable by...CVE-2005-05245.0 Medium
- phpPHP 4 (PHP4) allows attackers to cause a denial of service (daemon crash) by using the readfile...CVE-2005-05962.1 Low
- phpPHP 4.0 with cURL functions allows remote attackers to bypass the open_basedir setting and read...CVE-2004-1392Public exploitEPSS 10.8%5.0 Medium
- php, openpkg, trustix secure linux +1 more +3 moreBuffer overflow in the exif_read_data function in PHP before 4.3.10 and PHP 5.x up to 5.0.2...CVE-2004-1065EPSS 10.0%10.0 High
- php, openpkg, trustix secure linux +1 more +3 moreThe deserialization code in PHP before 4.3.10 and PHP 5.x up to 5.0.2 allows remote attackers to...CVE-2004-101910.0 High
- php, canonical ubuntu linux +1 moreThe safe mode checks in PHP 4.x to 4.3.9 and PHP 5.x to 5.0.2 truncate the file path before...CVE-2004-106410.0 High
- php, canonical ubuntu linux +1 morePHP 4.x to 4.3.9, and PHP 5.x to 5.0.2, when running in safe mode on a multithreaded Unix...CVE-2004-106310.0 High
- phpThe addslashes function in PHP 4.3.9 does not properly escape a NULL (/0) character, which may...CVE-2004-1020Public exploit5.0 Medium
- php, canonical ubuntu linux +1 moreMultiple integer handling errors in PHP before 4.3.10 allow attackers to bypass safe mode...CVE-2004-1018Public exploitEPSS 16.2%10.0 High
- phprfc1867.c in PHP before 5.0.2 allows local users to upload files to arbitrary locations via a PHP...CVE-2004-09592.1 Low
- phpphp_variables.c in PHP before 5.0.2 allows remote attackers to read sensitive memory contents via...CVE-2004-0958Public exploit5.0 Medium
- php, avaya converged communications server, integrated management +5 more +7 moreThe strip_tags function in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, does not filter null (\0)...CVE-2004-0595Public exploitEPSS 45.2%6.8 Medium
- php, avaya converged communications server, debian linux +3 more +5 moreThe memory_limit functionality in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, under certain...CVE-2004-0594Public exploitEPSS 54.9%5.1 Medium
- phpPHP before 4.3.7 on Win32 platforms does not properly filter all shell metacharacters, which...CVE-2004-0542EPSS 31.1%10.0 High
- phpBuffer overflow in the imap_fetch_overview function in the IMAP functionality (php_imap.c) in PHP...CVE-2003-1303EPSS 12.1%5.0 Medium
- phpThe IMAP functionality in PHP before 4.3.1 allows remote attackers to cause a denial of service...CVE-2003-13025.0 Medium
- Show moreLoading…