PHP

CVEs (751)

• CVE-2013-1635Mar 6, 2013
  PHP

  PHP
  risk 0.01cvss —epss 0.10

  ext/soap/soap.c in PHP before 5.3.22 and 5.4.x before 5.4.13 does not validate the relationship between the soap.wsdl_cache_dir directive and the open_basedir directive, which allows remote attackers to bypass intended access restrictions by triggering the creation of cached…

• CVE-2012-2688Jul 20, 2012
  PHP

  PHP
  risk 0.01cvss —epss 0.10

  Unspecified vulnerability in the _php_stream_scandir function in the stream implementation in PHP before 5.3.15 and 5.4.x before 5.4.5 has unknown impact and remote attack vectors, related to an "overflow."

• CVE-2012-1172May 24, 2012
  PHP

  PHP
  risk 0.01cvss —epss 0.06

  The file-upload implementation in rfc1867.c in PHP before 5.4.0 does not properly handle invalid [ (open square bracket) characters in name values, which makes it easier for remote attackers to cause a denial of service (malformed $_FILES indexes) or conduct directory traversal…

• CVE-2012-0831Feb 10, 2012
  PHP

  PHP
  risk 0.01cvss —epss 0.07

  PHP before 5.3.10 does not properly perform a temporary change to the magic_quotes_gpc directive during the importing of environment variables, which makes it easier for remote attackers to conduct SQL injection attacks via a crafted request, related to main/php_variables.c,…

• CVE-2011-4566Nov 29, 2011
  PHP

  PHP
  risk 0.01cvss —epss 0.07

  Integer overflow in the exif_process_IFD_TAG function in exif.c in the exif extension in PHP 5.4.0beta2 on 32-bit platforms allows remote attackers to read the contents of arbitrary memory locations or cause a denial of service via a crafted offset_val value in an EXIF header in…

• CVE-2011-1153Mar 16, 2011
  PHP

  PHP
  risk 0.01cvss —epss 0.07

  Multiple format string vulnerabilities in phar_object.c in the phar extension in PHP 5.3.5 and earlier allow context-dependent attackers to obtain sensitive information from process memory, cause a denial of service (memory corruption), or possibly execute arbitrary code via…

• CVE-2010-3436Nov 9, 2010
  PHP

  PHP
  risk 0.01cvss —epss 0.06

  fopen_wrappers.c in PHP 5.3.x through 5.3.3 might allow remote attackers to bypass open_basedir restrictions via vectors related to the length of a filename.

• CVE-2009-3546Oct 19, 2009
  PHP

  PHP
  risk 0.01cvss —epss 0.10

  The _gdGetColors function in gd_gd.c in PHP 5.2.11 and 5.3.x before 5.3.1, and the GD Graphics Library 2.x, does not properly verify a certain colorsTotal structure member, which might allow remote attackers to conduct buffer overflow or buffer over-read attacks via a crafted GD…

• CVE-2008-5557Dec 23, 2008
  PHP

  PHP
  risk 0.01cvss —epss 0.07

  Heap-based buffer overflow in ext/mbstring/libmbfl/filters/mbfilter_htmlent.c in the mbstring extension in PHP 4.3.0 through 5.2.6 allows context-dependent attackers to execute arbitrary code via a crafted string containing an HTML entity, which is not properly handled during…

• CVE-2008-3658Aug 15, 2008
  PHP

  PHP
  risk 0.01cvss —epss 0.07

  Buffer overflow in the imageloadfont function in ext/gd/gd.c in PHP 4.4.x before 4.4.9 and PHP 5.2 before 5.2.6-r6 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted font file.

• CVE-2008-2371Jul 7, 2008
  Pcre

  Pcre
  risk 0.01cvss —epss 0.07

  Heap-based buffer overflow in pcre_compile.c in the Perl-Compatible Regular Expression (PCRE) library 7.7 allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a regular expression that begins with an option and contains…

• CVE-2007-0455Jan 30, 2007
  Libgd

  GD Graphics Library
  risk 0.01cvss —epss 0.12

  Buffer overflow in the gdImageStringFTEx function in gdft.c in GD Graphics Library 2.0.33 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted string with a JIS encoded font.

• CVE-2006-5465Nov 4, 2006
  PHP

  PHP
  risk 0.01cvss —epss 0.08

  Buffer overflow in PHP before 5.2.0 allows remote attackers to execute arbitrary code via crafted UTF-8 inputs to the (1) htmlentities or (2) htmlspecialchars functions.

• CVE-2006-1990Apr 24, 2006
  PHP

  PHP
  risk 0.01cvss —epss 0.10

  Integer overflow in the wordwrap function in string.c in PHP 4.4.2 and 5.1.2 might allow context-dependent attackers to execute arbitrary code via certain long arguments that cause a small buffer to be allocated, which triggers a heap-based buffer overflow in a memcpy function…

• CVE-2005-3353Nov 18, 2005
  PHP

  PHP
  risk 0.01cvss —epss 0.08

  The exif_read_data function in the Exif module in PHP before 4.4.1 allows remote attackers to cause a denial of service (infinite loop) via a malformed JPEG image.

• CVE-2005-3392Nov 1, 2005
  PHP

  PHP
  risk 0.01cvss —epss 0.07

  Unspecified vulnerability in PHP before 4.4.1, when using the virtual function on Apache 2, allows remote attackers to bypass safe_mode and open_basedir directives.

• CVE-2005-3389Nov 1, 2005
  PHP

  PHP
  risk 0.01cvss —epss 0.06

  The parse_str function in PHP 4.x up to 4.4.0 and 5.x up to 5.0.5, when called with only one parameter, allows remote attackers to enable the register_globals directive via inputs that cause a request to be terminated due to the memory_limit setting, which causes PHP to set an…

• CVE-2005-3391Nov 1, 2005
  PHP

  PHP
  risk 0.01cvss —epss 0.07

  Multiple vulnerabilities in PHP before 4.4.1 allow remote attackers to bypass safe_mode and open_basedir restrictions via unknown attack vectors in (1) ext/curl and (2) ext/gd.

• CVE-2004-1019Jan 10, 2005
  PHP

  PHP
  risk 0.01cvss —epss 0.08

  The deserialization code in PHP before 4.3.10 and PHP 5.x up to 5.0.2 allows remote attackers to cause a denial of service and execute arbitrary code via untrusted data to the unserialize function that may trigger "information disclosure, double-free and negative reference index…

• CVE-2004-1065Jan 10, 2005
  PHP

  PHP
  risk 0.01cvss —epss 0.10

  Buffer overflow in the exif_read_data function in PHP before 4.3.10 and PHP 5.x up to 5.0.2 allows remote attackers to execute arbitrary code via a long section name in an image file.