PHP

CVEs (751)

• CVE-2003-1303Dec 31, 2003
  PHP

  PHP
  risk 0.01cvss —epss 0.12

  Buffer overflow in the imap_fetch_overview function in the IMAP functionality (php_imap.c) in PHP before 4.3.3 allows remote attackers to cause a denial of service (segmentation fault) and possibly execute arbitrary code via a long e-mail address in a (1) To or (2) From header.

• CVE-2002-1783Dec 31, 2002
  PHP

  PHP
  risk 0.01cvss —epss 0.17

  CRLF injection vulnerability in PHP 4.2.1 through 4.2.3, when allow_url_fopen is enabled, allows remote attackers to modify HTTP headers for outgoing requests by causing CRLF sequences to be injected into arguments that are passed to the (1) fopen or (2) file functions.

• CVE-2002-0717Jul 26, 2002
  PHP

  PHP
  risk 0.01cvss —epss 0.11

  PHP 4.2.0 and 4.2.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an HTTP POST request with certain arguments in a multipart/form-data form, which generates an error condition that is not properly handled and causes improper memory…

• CVE-2002-0240May 29, 2002
  PHP

  PHP
  risk 0.01cvss —epss 0.08

  PHP, when installed with Apache and configured to search for index.php as a default web page, allows remote attackers to obtain the full pathname of the server via the HTTP OPTIONS method, which reveals the pathname in the resulting error message.

• CVE-2002-0249May 29, 2002
  PHP

  PHP
  risk 0.01cvss —epss 0.08

  PHP for Windows, when installed on Apache 2.0.28 beta as a standalone CGI module, allows remote attackers to obtain the physical path of the php.exe via a request with malformed arguments such as /123, which leaks the pathname in the error message.

• CVE-2001-1247Dec 6, 2001
  PHP

  PHP
  risk 0.01cvss —epss 0.09

  PHP 4.0.4pl1 and 4.0.5 in safe mode allows remote attackers to read and write files owned by the web server UID by uploading a PHP script that uses the error_log function to access the files.

• CVE-2017-7189HigJul 10, 2019
  PHP

  PHP
  risk 0.00cvss 7.5epss 0.02

  main/streams/xp_socket.c in PHP 7.x before 2017-03-07 misparses fsockopen calls, such as by interpreting fsockopen('127.0.0.1:80', 443) as if the address/port were 127.0.0.1:80:443, which is later truncated to 127.0.0.1:80. This behavior has a security risk if the explicitly…

• CVE-2019-13224CriJul 10, 2019
  PHP

  PHP
  risk 0.00cvss 9.8epss 0.04

  A use-after-free in onig_new_deluxe() in regext.c in Oniguruma 6.9.2 allows attackers to potentially cause information disclosure, denial of service, or possibly code execution by providing a crafted regular expression. The attacker provides a pair of a regex pattern and a…

• CVE-2018-17082MedSep 16, 2018
  PHP

  PHP
  risk 0.00cvss 6.1epss 0.04

  The Apache2 component in PHP before 5.6.38, 7.0.x before 7.0.32, 7.1.x before 7.1.22, and 7.2.x before 7.2.10 allows XSS via the body of a "Transfer-Encoding: chunked" request, because the bucket brigade is mishandled in the php_handler function in…

• CVE-2015-3416Apr 24, 2015
  SQLite

  SQLite
  risk 0.00cvss —epss 0.06

  The sqlite3VXPrintf function in printf.c in SQLite before 3.8.9 does not properly handle precision and width values during floating-point conversions, which allows context-dependent attackers to cause a denial of service (integer overflow and stack-based buffer overflow) or…

• CVE-2015-3415Apr 24, 2015
  SQLite

  SQLite
  risk 0.00cvss —epss 0.05

  The sqlite3VdbeExec function in vdbe.c in SQLite before 3.8.9 does not properly implement comparison operators, which allows context-dependent attackers to cause a denial of service (invalid free operation) or possibly have unspecified other impact via a crafted CHECK clause, as…

• CVE-2015-3414Apr 24, 2015
  SQLite

  SQLite
  risk 0.00cvss —epss 0.05

  SQLite before 3.8.9 does not properly implement the dequoting of collation-sequence names, which allows context-dependent attackers to cause a denial of service (uninitialized memory access and application crash) or possibly have unspecified other impact via a crafted COLLATE…

• CVE-2014-9653Mar 30, 2015
  PHP

  PHP
  risk 0.00cvss —epss 0.05

  readelf.c in file before 5.22, as used in the Fileinfo component in PHP before 5.4.37, 5.5.x before 5.5.21, and 5.6.x before 5.6.5, does not consider that pread calls sometimes read only a subset of the available data, which allows remote attackers to cause a denial of service…

• CVE-2014-9652Mar 30, 2015
  PHP

  PHP
  risk 0.00cvss —epss 0.05

  The mconvert function in softmagic.c in file before 5.21, as used in the Fileinfo component in PHP before 5.4.37, 5.5.x before 5.5.21, and 5.6.x before 5.6.5, does not properly handle a certain string-length field during a copy of a truncated version of a Pascal string, which…

• CVE-2013-6501Mar 30, 2015
  PHP

  PHP
  risk 0.00cvss —epss 0.01

  The default soap.wsdl_cache_dir setting in (1) php.ini-production and (2) php.ini-development in PHP through 5.6.7 specifies the /tmp directory, which makes it easier for local users to conduct WSDL injection attacks by creating a file under /tmp with a predictable filename that…

• CVE-2015-0231Jan 27, 2015
  PHP

  PHP
  risk 0.00cvss —epss 0.43

  Use-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer.re in PHP before 5.4.37, 5.5.x before 5.5.21, and 5.6.x before 5.6.5 allows remote attackers to execute arbitrary code via a crafted unserialize call that leverages improper…

• CVE-2014-9425Dec 31, 2014
  PHP

  PHP
  risk 0.00cvss —epss 0.04

  Double free vulnerability in the zend_ts_hash_graceful_destroy function in zend_ts_hash.c in the Zend Engine in PHP through 5.5.20 and 5.6.x through 5.6.4 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.

• CVE-2014-8626Nov 23, 2014
  PHP

  PHP
  risk 0.00cvss —epss 0.06

  Stack-based buffer overflow in the date_from_ISO8601 function in ext/xmlrpc/libxmlrpc/xmlrpc.c in PHP before 5.2.7 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code by including a timezone field in a date, leading to…

• CVE-2014-3710Nov 5, 2014
  PHP

  PHP
  risk 0.00cvss —epss 0.14

  The donote function in readelf.c in file through 5.20, as used in the Fileinfo component in PHP 5.4.34, does not ensure that sufficient note headers are present, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted…

• CVE-2014-5459Sep 27, 2014
  PHP

  PHP
  risk 0.00cvss —epss 0.01

  The PEAR_REST class in REST.php in PEAR in PHP through 5.6.0 allows local users to write to arbitrary files via a symlink attack on a (1) rest.cachefile or (2) rest.cacheid file in /tmp/pear/cache/, related to the retrieveCacheFirst and useLocalCache functions.