PHP

CVEs (731)

• CVE-2011-1153Mar 16, 2011
  PHP

  PHP
  risk 0.01cvss —epss 0.07

  Multiple format string vulnerabilities in phar_object.c in the phar extension in PHP 5.3.5 and earlier allow context-dependent attackers to obtain sensitive information from process memory, cause a denial of service (memory corruption), or possibly execute arbitrary code via…

• CVE-2010-3436Nov 9, 2010
  PHP

  PHP
  risk 0.01cvss —epss 0.06

  fopen_wrappers.c in PHP 5.3.x through 5.3.3 might allow remote attackers to bypass open_basedir restrictions via vectors related to the length of a filename.

• CVE-2009-3546Oct 19, 2009
  PHP

  PHP
  risk 0.01cvss —epss 0.10

  The _gdGetColors function in gd_gd.c in PHP 5.2.11 and 5.3.x before 5.3.1, and the GD Graphics Library 2.x, does not properly verify a certain colorsTotal structure member, which might allow remote attackers to conduct buffer overflow or buffer over-read attacks via a crafted GD…

• CVE-2008-5557Dec 23, 2008
  PHP

  PHP
  risk 0.01cvss —epss 0.07

  Heap-based buffer overflow in ext/mbstring/libmbfl/filters/mbfilter_htmlent.c in the mbstring extension in PHP 4.3.0 through 5.2.6 allows context-dependent attackers to execute arbitrary code via a crafted string containing an HTML entity, which is not properly handled during…

• CVE-2008-3658Aug 15, 2008
  PHP

  PHP
  risk 0.01cvss —epss 0.07

  Buffer overflow in the imageloadfont function in ext/gd/gd.c in PHP 4.4.x before 4.4.9 and PHP 5.2 before 5.2.6-r6 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted font file.

• CVE-2008-2371Jul 7, 2008
  Pcre

  Pcre
  risk 0.01cvss —epss 0.07

  Heap-based buffer overflow in pcre_compile.c in the Perl-Compatible Regular Expression (PCRE) library 7.7 allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a regular expression that begins with an option and contains…

• CVE-2007-0455Jan 30, 2007
  Libgd

  GD Graphics Library
  risk 0.01cvss —epss 0.12

  Buffer overflow in the gdImageStringFTEx function in gdft.c in GD Graphics Library 2.0.33 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted string with a JIS encoded font.

• CVE-2006-5465Nov 4, 2006
  PHP

  PHP
  risk 0.01cvss —epss 0.08

  Buffer overflow in PHP before 5.2.0 allows remote attackers to execute arbitrary code via crafted UTF-8 inputs to the (1) htmlentities or (2) htmlspecialchars functions.

• CVE-2006-4484Aug 31, 2006
  PHP

  PHP
  risk 0.01cvss —epss 0.06

  Buffer overflow in the LWZReadByte_ function in ext/gd/libgd/gd_gif_in.c in the GD extension in PHP before 5.1.5 allows remote attackers to have an unknown impact via a GIF file with input_code_size greater than MAX_LWZ_BITS, which triggers an overflow when initializing the…

• CVE-2006-1990Apr 24, 2006
  PHP

  PHP
  risk 0.01cvss —epss 0.10

  Integer overflow in the wordwrap function in string.c in PHP 4.4.2 and 5.1.2 might allow context-dependent attackers to execute arbitrary code via certain long arguments that cause a small buffer to be allocated, which triggers a heap-based buffer overflow in a memcpy function…

• CVE-2005-3353Nov 18, 2005
  PHP

  PHP
  risk 0.01cvss —epss 0.08

  The exif_read_data function in the Exif module in PHP before 4.4.1 allows remote attackers to cause a denial of service (infinite loop) via a malformed JPEG image.

• CVE-2005-3391Nov 1, 2005
  PHP

  PHP
  risk 0.01cvss —epss 0.07

  Multiple vulnerabilities in PHP before 4.4.1 allow remote attackers to bypass safe_mode and open_basedir restrictions via unknown attack vectors in (1) ext/curl and (2) ext/gd.

• CVE-2005-3389Nov 1, 2005
  PHP

  PHP
  risk 0.01cvss —epss 0.06

  The parse_str function in PHP 4.x up to 4.4.0 and 5.x up to 5.0.5, when called with only one parameter, allows remote attackers to enable the register_globals directive via inputs that cause a request to be terminated due to the memory_limit setting, which causes PHP to set an…

• CVE-2005-3392Nov 1, 2005
  PHP

  PHP
  risk 0.01cvss —epss 0.07

  Unspecified vulnerability in PHP before 4.4.1, when using the virtual function on Apache 2, allows remote attackers to bypass safe_mode and open_basedir directives.

• CVE-2004-1019Jan 10, 2005
  PHP

  PHP
  risk 0.01cvss —epss 0.08

  The deserialization code in PHP before 4.3.10 and PHP 5.x up to 5.0.2 allows remote attackers to cause a denial of service and execute arbitrary code via untrusted data to the unserialize function that may trigger "information disclosure, double-free and negative reference index…

• CVE-2004-1065Jan 10, 2005
  PHP

  PHP
  risk 0.01cvss —epss 0.10

  Buffer overflow in the exif_read_data function in PHP before 4.3.10 and PHP 5.x up to 5.0.2 allows remote attackers to execute arbitrary code via a long section name in an image file.

• CVE-2003-1303Dec 31, 2003
  PHP

  PHP
  risk 0.01cvss —epss 0.12

  Buffer overflow in the imap_fetch_overview function in the IMAP functionality (php_imap.c) in PHP before 4.3.3 allows remote attackers to cause a denial of service (segmentation fault) and possibly execute arbitrary code via a long e-mail address in a (1) To or (2) From header.

• CVE-2002-1783Dec 31, 2002
  PHP

  PHP
  risk 0.01cvss —epss 0.17

  CRLF injection vulnerability in PHP 4.2.1 through 4.2.3, when allow_url_fopen is enabled, allows remote attackers to modify HTTP headers for outgoing requests by causing CRLF sequences to be injected into arguments that are passed to the (1) fopen or (2) file functions.

• CVE-2002-0717Jul 26, 2002
  PHP

  PHP
  risk 0.01cvss —epss 0.11

  PHP 4.2.0 and 4.2.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an HTTP POST request with certain arguments in a multipart/form-data form, which generates an error condition that is not properly handled and causes improper memory…

• CVE-2002-0249May 29, 2002
  PHP

  PHP
  risk 0.01cvss —epss 0.08

  PHP for Windows, when installed on Apache 2.0.28 beta as a standalone CGI module, allows remote attackers to obtain the physical path of the php.exe via a request with malformed arguments such as /123, which leaks the pathname in the error message.