Skip to contentPhp vulnerabilities
Newest
- php, canonical ubuntu linux +1 morephp_imap.c in PHP 5.2.5, 5.2.6, 4.x, and other versions, uses obsolete API calls that allow...CVE-2008-2829Fix available5.0 Medium
- phpMultiple directory traversal vulnerabilities in PHP 5.2.6 and earlier allow context-dependent...CVE-2008-2666Public exploitEPSS 13.9%5.0 Medium
- phpDirectory traversal vulnerability in the posix_access function in PHP 5.2.6 and earlier allows...CVE-2008-26655.0 Medium
- php, canonical ubuntu linux, debian linux +1 more +3 moreThe GENERATE_SEED macro in PHP 4.x before 4.4.8 and 5.x before 5.2.5, when running on 64-bit...CVE-2008-21089.8 Critical
- phpThe GENERATE_SEED macro in PHP 4.x before 4.4.8 and 5.x before 5.2.5, when running on 32-bit...CVE-2008-21077.5 High
- phpThe escapeshellcmd API function in PHP before 5.2.6 has unknown impact and context-dependent...CVE-2008-205110.0 High
- phpStack-based buffer overflow in the FastCGI SAPI (fastcgi.c) in PHP before 5.2.6 has unknown...CVE-2008-205010.0 High
- php, apple mac os x, mac os x server +2 more +4 moreThe init_request_info function in sapi/cgi/cgi_main.c in PHP before 5.2.6 does not properly...CVE-2008-0599EPSS 10.9%9.8 Critical
- phpInteger overflow in PHP 5.2.5 and earlier allows context-dependent attackers to cause a denial of...CVE-2008-13845.0 Medium
- phpcurl/interface.c in the cURL library (aka libcurl) in PHP 5.2.4 and 5.2.5 allows context...CVE-2007-4850Public exploit5.0 Medium
- php f1 maxs file uploaderUnrestricted file upload vulnerability in PHP F1 Max's File Uploader allows remote attackers to...CVE-2008-03737.5 High
- phpUnspecified vulnerability in glob in PHP before 4.4.8, when open_basedir is enabled, has unknown...CVE-2008-01457.5 High
- php mysql banner exchangePHP MySQL Banner Exchange 2.2.1 stores sensitive information under the web root with insufficient...CVE-2007-65125.0 Medium
- phpPHP 5.2.5 and earlier allows context-dependent attackers to cause a denial of service ...CVE-2007-6039Public exploit2.1 Low
- phpThe output_add_rewrite_var function in PHP before 5.2.5 rewrites local forms in which the ACTION...CVE-2007-58994.3 Medium
- phpPHP before 5.2.5 allows local users to bypass protection mechanisms configured through...CVE-2007-59006.9 Medium
- phpThe (1) htmlentities and (2) htmlspecialchars functions in PHP before 5.2.5 accept partial...CVE-2007-58986.4 Medium
- phpThe Component Object Model (COM) functions in PHP 5.x on Windows do not follow safe_mode and...CVE-2007-5653Public exploit9.3 High
- php, ioncube php encoder +1 moreioncube_loader_win_5.2.dll in the ionCube Loader 6.5 extension for PHP 5.2.4 does not follow...CVE-2007-5447Public exploit4.3 Medium
- phpThe disable_functions feature in PHP 4 and 5 allows attackers to bypass intended restrictions by...CVE-2007-54247.5 High
- boesch-it simpnews, php +1 moreSimpNews 2.41.03 on Windows, when PHP before 5.0.0 is used, allows remote attackers to obtain...CVE-2007-51285.0 Medium
- php mysql extension, php +1 moreThe MySQL extension in PHP 5.2.4 and earlier allows remote attackers to bypass safe_mode and...CVE-2007-48896.8 Medium
- phpThe dl function in PHP 5.2.4 and earlier allows context-dependent attackers to cause a denial of...CVE-2007-48874.3 Medium
- phpPHP 5.2.4 and earlier allows context-dependent attackers to cause a denial of service ...CVE-2007-4840Fix available5.0 Medium
- phpDirectory traversal vulnerability in PHP 5.2.4 and earlier allows attackers to bypass...CVE-2007-48257.5 High
- phpThe setlocale function in PHP before 5.2.4 allows context-dependent attackers to cause a denial...CVE-2007-47845.0 Medium
- phpThe iconv_substr function in PHP 5.2.4 and earlier allows context-dependent attackers to cause (1...CVE-2007-47835.0 Medium
- phpPHP before 5.2.3 allows context-dependent attackers to cause a denial of service (application...CVE-2007-47825.0 Medium
- phpUnspecified vulnerability in PHP before 5.2.4 has unknown impact and attack vectors, related to...CVE-2007-46705.0 Medium
- phpDirectory traversal vulnerability in PHP before 5.2.4 allows attackers to bypass open_basedir...CVE-2007-46637.5 High
- phpBuffer overflow in the php_openssl_make_REQ function in PHP before 5.2.4 has unknown impact and...CVE-2007-46627.5 High
- phpThe chunk_split function in string.c in PHP 5.2.3 does not properly calculate the needed buffer...CVE-2007-46617.5 High
- phpUnspecified vulnerability in the chunk_split function in PHP before 5.2.4 has unknown impact and...CVE-2007-46607.5 High
- phpThe zend_alter_ini_entry function in PHP before 5.2.4 does not properly handle an interruption to...CVE-2007-46597.5 High
- phpThe money_format function in PHP 5 before 5.2.4, and PHP 4 before 4.4.8, permits multiple (1) %i...CVE-2007-46587.5 High
- php, canonical ubuntu linux, debian linux +2 moreMultiple integer overflows in PHP 4 before 4.4.8, and PHP 5 before 5.2.4, allow remote attackers...CVE-2007-46577.5 High
- phpThe session extension in PHP before 5.2.4 might allow local users to bypass open_basedir...CVE-2007-4652Public exploit4.4 Medium
- php, canonical ubuntu linux, debian linux +2 moreThe wordwrap function in PHP 4 before 4.4.8, and PHP 5 before 5.2.4, does not properly use the...CVE-2007-39985.0 Medium
- phpThe (1) MySQL and (2) MySQLi extensions in PHP 4 before 4.4.8, and PHP 5 before 5.2.4, allow...CVE-2007-3997Public exploitEPSS 13.8%7.5 High
- phpMultiple integer overflows in libgd in PHP before 5.2.4 allow remote attackers to cause a denial...CVE-2007-3996Fix available6.8 Medium
- phpThe perl extension in PHP does not follow safe_mode restrictions, which allows context-dependent...CVE-2007-4596Public exploit7.5 High
- phpMultiple buffer overflows in php_iisfunc.dll in the iisfunc extension for PHP 5.2.0 and earlier...CVE-2007-4586Public exploit7.5 High
- phpThe Foreign Function Interface (ffi) extension in PHP 5.0.5 does not follow safe_mode...CVE-2007-4528Public exploit4.3 Medium
- phpMultiple buffer overflows in the php_ntuser component for PHP 5.2.3 allow context-dependent...CVE-2007-4507Public exploit6.8 Medium
- phpBuffer overflow in php_win32std.dll in the win32std extension for PHP 5.2.0 and earlier allows...CVE-2007-4441Public exploit4.6 Medium
- phpBuffer overflow in the mSQL extension in PHP 5.2.3 allows context-dependent attackers to execute...CVE-2007-4255Public exploit7.5 High
- php, t1lib +1 moreBuffer overflow in the intT1_EnvGetCompletePath function in lib/t1lib/t1env.c in t1lib 5.1.1...CVE-2007-4033Public exploitFix availableEPSS 18.7%7.5 High
- phpThe win32std extension in PHP 5.2.3 does not follow safe_mode and disable_functions restrictions,...CVE-2007-4010Public exploit6.8 Medium
- phpThe glob function in PHP 5.2.3 allows context-dependent attackers to cause a denial of service...CVE-2007-3806Public exploitEPSS 10.7%6.8 Medium
- phpThe session_start function in ext/session in PHP 4.x up to 4.4.7 and 5.x up to 5.2.3 allows...CVE-2007-3799Public exploit4.3 Medium
- Show moreLoading…