Skip to contentPhp vulnerabilities
Newest
- phpThe com_print_typeinfo function in the bz2 extension in PHP 5.2.3 allows context-dependent...CVE-2007-3790Public exploit5.8 Medium
- phpThe (1) session_save_path, (2) ini_set, and (3) error_log functions in PHP 4.4.7 and earlier, and...CVE-2007-33786.8 Medium
- phpMultiple buffer overflows in libtidy, as used in the Tidy extension for PHP 5.2.3 and possibly...CVE-2007-3294Public exploit7.5 High
- hardened-php project hardened-php, php, hardened-php project subhosin +2 moreThe parse_str function in (1) PHP, (2) Hardened-PHP, and (3) Suhosin, when called without a...CVE-2007-32055.0 Medium
- phpPHP 5 before 5.2.3 does not enforce the open_basedir or safe_mode restriction in certain cases,...CVE-2007-30075.0 Medium
- phpMultiple integer overflows in the chunk_split function in PHP 5 before 5.2.3 and PHP 4 before 4.4...CVE-2007-2872Public exploit6.8 Medium
- phpPHP 4.x and 5.x before 5.2.1, when running on multi-threaded systems, does not ensure thread...CVE-2007-28449.3 High
- phpThe fopen function in PHP 5.2.0 does not properly handle invalid URI handlers, which allows...CVE-2007-0448Public exploit10.0 High
- phpThe imap_body function in PHP before 4.4.4 does not implement safemode or open_basedir checks,...CVE-2006-72042.1 Low
- phpThe substr_count function in PHP 5.2.1 and earlier allows context-dependent attackers to obtain...CVE-2007-27484.3 Medium
- php, canonical ubuntu linux +1 moreThe soap extension in PHP calls php_rand_r with an uninitialized seed variable, which has unknown...CVE-2007-2728Disputed5.0 Medium
- phpThe mcrypt_create_iv function in ext/mcrypt/mcrypt.c in PHP before 4.4.7, 5.2.1, and possibly 5.0...CVE-2007-27272.6 Low
- phpBuffer overflow in the user_filter_factory_create function in PHP before 5.2.2 has unknown impact...CVE-2007-25117.2 High
- phpBuffer overflow in the make_http_soap_request function in PHP before 5.2.2 has unknown impact and...CVE-2007-25105.1 Medium
- phpCRLF injection vulnerability in the ftp_putcmd function in PHP before 4.4.7, and 5.x before 5.2.2...CVE-2007-2509Fix available2.6 Low
- php, canonical ubuntu linux, debian linux +2 more +4 moreBuffer overflow in the bundled libxmlrpc library in PHP before 4.4.7, and 5.x before 5.2.2, has...CVE-2007-18647.5 High
- php, webspell +1 moreDirectory traversal vulnerability in picture.php in WebSPELL 4.01.02 and earlier, when PHP before...CVE-2007-2369Public exploit5.0 Medium
- phpCRLF injection vulnerability in the FILTER_VALIDATE_EMAIL filter in ext/filter in PHP 5.2.0 and 5...CVE-2007-19005.0 Medium
- phpInteger overflow in the msg_receive function in PHP 4 before 4.4.5 and PHP 5 before 5.2.1, on...CVE-2007-1890Public exploit7.5 High
- phpInteger signedness error in the _zend_mm_alloc_int function in the Zend Memory Manager in PHP 5.2...CVE-2007-18897.5 High
- phpBuffer overflow in the sqlite_decode_binary function in src/encode.c in SQLite 2, as used by PHP...CVE-2007-18887.5 High
- php, canonical ubuntu linux, debian linux +2 moreBuffer overflow in the sqlite_decode_binary function in the bundled sqlite library in PHP 4...CVE-2007-18877.5 High
- phpInteger overflow in the str_replace function in PHP 4.4.5 and PHP 5.2.1 allows context-dependent...CVE-2007-18866.8 Medium
- phpInteger overflow in the str_replace function in PHP 4 before 4.4.5 and PHP 5 before 5.2.1 allows...CVE-2007-18857.5 High
- phpMultiple integer signedness errors in the printf function family in PHP 4 before 4.4.5 and PHP 5...CVE-2007-18846.8 Medium
- phpPHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 allows context-dependent attackers to read...CVE-2007-18837.8 High
- phpMultiple integer overflows in the (1) createwbmp and (2) readwbmp functions in wbmp.c in the GD...CVE-2007-1001Public exploitFix available6.8 Medium
- phpPHP 4 before 4.4.5 and PHP 5 before 5.2.1, when using an empty session save path (session...CVE-2007-1835Public exploit4.6 Medium
- phpBuffer overflow in the imap_mail_compose function in PHP 5 before 5.2.1, and PHP 4 before 4.4.5,...CVE-2007-1825Public exploitEPSS 10.5%7.5 High
- phpBuffer overflow in the php_stream_filter_create function in PHP 5 before 5.2.1 allows remote...CVE-2007-18245.1 Medium
- phpInteger overflow in the zip_read_entry function in PHP 4 before 4.4.5 allows remote attackers to...CVE-2007-1777Public exploitEPSS 15.5%7.5 High
- phpCRLF injection vulnerability in the mail function in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5...CVE-2007-1718Public exploit7.8 High
- phpThe mail function in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 truncates e-mail messages at...CVE-2007-1717Public exploit5.0 Medium
- phpDouble free vulnerability in the unserializer in PHP 4.4.5 and 4.4.6 allows context-dependent...CVE-2007-1711Public exploit6.8 Medium
- phpThe readfile function in PHP 4.4.4, 5.1.6, and 5.2.1 allows context-dependent attackers to bypass...CVE-2007-17104.3 Medium
- phpBuffer overflow in the confirm_phpdoc_compiled function in the phpDOC extension (PECL phpDOC) in...CVE-2007-1709Public exploit4.3 Medium
- phpPHP 4 before 4.4.5, and PHP 5 before 5.2.1, when register_globals is enabled, allows context...CVE-2007-1701Public exploit6.8 Medium
- phpThe session extension in PHP 4 before 4.4.5, and PHP 5 before 5.2.1, calculates the reference...CVE-2007-1700Public exploit7.5 High
- phpPHP 5.2.1 allows context-dependent attackers to read portions of heap memory by executing certain...CVE-2007-1649Public exploit7.8 High
- phpBuffer underflow in the header function in PHP 5.2.0 allows context-dependent attackers to...CVE-2007-1584Public exploit6.8 Medium
- phpThe mb_parse_str function in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 sets the internal...CVE-2007-1583Public exploit6.8 Medium
- phpThe resource system in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 allows context-dependent...CVE-2007-1582Public exploit6.8 Medium
- phpThe resource system in PHP 5.0.0 through 5.2.1 allows context-dependent attackers to execute...CVE-2007-1581Public exploit9.3 High
- phpDouble free vulnerability in the session extension in PHP 5.2.0 and 5.2.1 allows context...CVE-2007-1522Public exploit6.8 Medium
- phpDouble free vulnerability in PHP before 4.4.7, and 5.x before 5.2.2, allows context-dependent...CVE-2007-1521Public exploit6.8 Medium
- phpThe array_user_key_compare function in PHP 4.4.6 and earlier, and 5.x up to 5.2.1, makes...CVE-2007-1484Public exploit4.6 Medium
- phpMultiple buffer overflows in the (1) ibase_connect and (2) ibase_pconnect functions in the...CVE-2007-1475Public exploit5.4 Medium
- phpThe compress.bzip2:// URL wrapper provided by the bz2 extension in PHP before 4.4.7, and 5.x...CVE-2007-14617.8 High
- phpThe zip:// URL wrapper provided by the PECL zip extension in PHP before 4.4.7, and 5.2.0 and 5.2...CVE-2007-14605.0 Medium
- phpext/filter in PHP 5.2.0, when FILTER_SANITIZE_STRING is used with the FILTER_FLAG_STRIP_LOW flag,...CVE-2007-14544.3 Medium
- Show moreLoading…