PHP

CVEs (730)

• CVE-2010-1129Mar 26, 2010
  PHP

  PHP
  risk 0.00cvss —epss 0.03

  The safe_mode implementation in PHP before 5.2.13 does not properly handle directory pathnames that lack a trailing / (slash) character, which allows context-dependent attackers to bypass intended access restrictions via vectors related to use of the tempnam function.

• CVE-2009-4418Dec 24, 2009
  PHP

  PHP
  risk 0.00cvss —epss 0.01

  The unserialize function in PHP 5.3.0 and earlier allows context-dependent attackers to cause a denial of service (resource consumption) via a deeply nested serialized variable, as demonstrated by a string beginning with a:1: followed by many {a:1: sequences.

• CVE-2009-4143Dec 21, 2009
  PHP

  PHP
  risk 0.00cvss —epss 0.03

  PHP before 5.2.12 does not properly handle session data, which has unspecified impact and attack vectors related to (1) interrupt corruption of the SESSION superglobal array and (2) the session.save_path directive.

• CVE-2009-3559Nov 23, 2009
  PHP

  PHP
  risk 0.00cvss —epss 0.03

  main/streams/plain_wrapper.c in PHP 5.3.x before 5.3.1 does not recognize the safe_mode_include_dir directive, which allows context-dependent attackers to have an unknown impact by triggering the failure of PHP scripts that perform include or require operations, as demonstrated…

• CVE-2009-3558Nov 23, 2009
  PHP

  PHP
  risk 0.00cvss —epss 0.02

  The posix_mkfifo function in ext/posix/posix.c in PHP before 5.2.12 and 5.3.x before 5.3.1 allows context-dependent attackers to bypass open_basedir restrictions, and create FIFO files, via the pathname and mode arguments, as demonstrated by creating a .htaccess file.

• CVE-2009-3557Nov 23, 2009
  PHP

  PHP
  risk 0.00cvss —epss 0.02

  The tempnam function in ext/standard/file.c in PHP before 5.2.12 and 5.3.x before 5.3.1 allows context-dependent attackers to bypass safe_mode restrictions, and create files in group-writable or world-writable directories, via the dir and prefix arguments.

• CVE-2009-3294Sep 22, 2009
  PHP

  PHP
  risk 0.00cvss —epss 0.03

  The popen API function in TSRM/tsrm_win32.c in PHP before 5.2.11 and 5.3.x before 5.3.1, when running on certain Windows operating systems, allows context-dependent attackers to cause a denial of service (crash) via a crafted (1) "e" or (2) "er" string in the second argument…

• CVE-2009-3293Sep 22, 2009
  PHP

  PHP
  risk 0.00cvss —epss 0.03

  Unspecified vulnerability in the imagecolortransparent function in PHP before 5.2.11 has unknown impact and attack vectors related to an incorrect "sanity check for the color index."

• CVE-2009-3292Sep 22, 2009
  PHP

  PHP
  risk 0.00cvss —epss 0.03

  Unspecified vulnerability in PHP before 5.2.11, and 5.3.x before 5.3.1, has unknown impact and attack vectors related to "missing sanity checks around exif processing."

• CVE-2009-3291Sep 22, 2009
  PHP

  PHP
  risk 0.00cvss —epss 0.03

  The php_openssl_apply_verification_policy function in PHP before 5.2.11 does not properly perform certificate validation, which has unknown impact and attack vectors, probably related to an ability to spoof certificates.

• CVE-2008-7068Aug 25, 2009
  PHP

  PHP
  risk 0.00cvss —epss 0.02

  The dba_replace function in PHP 5.2.6 and 4.x allows context-dependent attackers to cause a denial of service (file truncation) via a key with the NULL byte. NOTE: this might only be a vulnerability in limited circumstances in which the attacker can modify or add database…

• CVE-2009-2687Aug 5, 2009
  PHP

  PHP
  risk 0.00cvss —epss 0.04

  The exif_read_data function in the Exif module in PHP before 5.2.10 allows remote attackers to cause a denial of service (crash) via a malformed JPEG image with invalid offset fields, a different issue than CVE-2005-3353.

• CVE-2009-1272Apr 8, 2009
  PHP

  PHP
  risk 0.00cvss —epss 0.02

  The php_zip_make_relative_path function in php_zip.c in PHP 5.2.x before 5.2.9 allows context-dependent attackers to cause a denial of service (crash) via a ZIP file that contains filenames with relative paths, which is not properly handled during extraction.

• CVE-2009-1271Apr 8, 2009
  PHP

  PHP
  risk 0.00cvss —epss 0.02

  The JSON_parser function (ext/json/JSON_parser.c) in PHP 5.2.x before 5.2.9 allows remote attackers to cause a denial of service (segmentation fault) via a malformed string to the json_decode API function.

• CVE-2008-5844Jan 5, 2009
  PHP

  PHP
  risk 0.00cvss —epss 0.02

  PHP 5.2.7 contains an incorrect change to the FILTER_UNSAFE_RAW functionality, and unintentionally disables magic_quotes_gpc regardless of the actual magic_quotes_gpc setting, which might make it easier for context-dependent attackers to conduct SQL injection attacks and…

• CVE-2008-5814Jan 2, 2009
  PHP

  PHP
  risk 0.00cvss —epss 0.02

  Cross-site scripting (XSS) vulnerability in PHP, possibly 5.2.7 and earlier, when display_errors is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: because of the lack of details, it is unclear whether this is related to…

• CVE-2008-5658Dec 17, 2008
  PHP

  PHP
  risk 0.00cvss —epss 0.04

  Directory traversal vulnerability in the ZipArchive::extractTo function in PHP 5.2.6 and earlier allows context-dependent attackers to write arbitrary files via a ZIP file with a file whose name contains .. (dot dot) sequences.

• CVE-2008-5624Dec 17, 2008
  PHP

  PHP
  risk 0.00cvss —epss 0.02

  PHP 5 before 5.2.7 does not properly initialize the page_uid and page_gid global variables for use by the SAPI php_getuid function, which allows context-dependent attackers to bypass safe_mode restrictions via variable settings that are intended to be restricted to root, as…

• CVE-2008-4107Sep 18, 2008
  PHP

  PHP
  risk 0.00cvss —epss 0.03

  The (1) rand and (2) mt_rand functions in PHP 5.2.6 do not produce cryptographically strong random numbers, which allows attackers to leverage exposures in products that rely on these functions for security-relevant functionality, as demonstrated by the password-reset…

• CVE-2008-3660Aug 15, 2008
  PHP

  PHP
  risk 0.00cvss —epss 0.03

  PHP 4.4.x before 4.4.9, and 5.x through 5.2.6, when used as a FastCGI module, allows remote attackers to cause a denial of service (crash) via a request with multiple dots preceding the extension, as demonstrated using foo..php.