PHP

CVEs (730)

• CVE-2007-0906Feb 13, 2007
  PHP

  PHP
  risk 0.00cvss —epss 0.05

  Multiple buffer overflows in PHP before 5.2.1 allow attackers to cause a denial of service and possibly execute arbitrary code via unspecified vectors in the (1) session, (2) zip, (3) imap, and (4) sqlite extensions; (5) stream filters; and the (6) str_replace, (7) mail, (8)…

• CVE-2007-0910Feb 13, 2007
  PHP

  PHP
  risk 0.00cvss —epss 0.03

  Unspecified vulnerability in PHP before 5.2.1 allows attackers to "clobber" certain super-global variables via unspecified vectors.

• CVE-2007-0909Feb 13, 2007
  PHP

  PHP
  risk 0.00cvss —epss 0.03

  Multiple format string vulnerabilities in PHP before 5.2.1 might allow attackers to execute arbitrary code via format string specifiers to (1) all of the *print functions on 64-bit systems, and (2) the odbc_result_all function.

• CVE-2007-0905Feb 13, 2007
  PHP

  PHP
  risk 0.00cvss —epss 0.02

  PHP before 5.2.1 allows attackers to bypass safe_mode and open_basedir restrictions via unspecified vectors in the session extension. NOTE: it is possible that this issue is a duplicate of CVE-2006-6383.

• CVE-2007-0907Feb 13, 2007
  PHP

  PHP
  risk 0.00cvss —epss 0.02

  Buffer underflow in PHP before 5.2.1 allows attackers to cause a denial of service via unspecified vectors involving the sapi_header_op function.

• CVE-2006-5706Nov 4, 2006
  PHP

  PHP
  risk 0.00cvss —epss 0.00

  Unspecified vulnerabilities in PHP, probably before 5.2.0, allow local users to bypass open_basedir restrictions and perform unspecified actions via unspecified vectors involving the (1) chdir and (2) tempnam functions. NOTE: the tempnam vector might overlap CVE-2006-1494.

• CVE-2006-4485Aug 31, 2006
  PHP

  PHP
  risk 0.00cvss —epss 0.02

  The stripos function in PHP before 5.1.5 has unknown impact and attack vectors related to an out-of-bounds read.

• CVE-2006-4486Aug 31, 2006
  PHP

  PHP
  risk 0.00cvss —epss 0.02

  Integer overflow in memory allocation routines in PHP before 5.1.6, when running on a 64-bit system, allows context-dependent attackers to bypass the memory_limit restriction.

• CVE-2006-4482Aug 31, 2006
  PHP

  PHP
  risk 0.00cvss —epss 0.04

  Multiple heap-based buffer overflows in the (1) str_repeat and (2) wordwrap functions in ext/standard/string.c in PHP before 5.1.5, when used on a 64-bit system, have unspecified impact and attack vectors, a different vulnerability than CVE-2006-1990.

• CVE-2006-4483Aug 31, 2006
  PHP

  PHP
  risk 0.00cvss —epss 0.03

  The cURL extension files (1) ext/curl/interface.c and (2) ext/curl/streams.c in PHP before 5.1.5 permit the CURLOPT_FOLLOWLOCATION option when open_basedir or safe_mode is enabled, which allows attackers to perform unauthorized actions, possibly related to the realpath cache.

• CVE-2006-4481Aug 31, 2006
  PHP

  PHP
  risk 0.00cvss —epss 0.01

  The (1) file_exists and (2) imap_reopen functions in PHP before 5.1.5 do not check for the safe_mode and open_basedir settings, which allows local users to bypass the settings. NOTE: the error_log function is covered by CVE-2006-3011, and the imap_open function is covered by…

• CVE-2006-4433Aug 29, 2006
  PHP

  PHP
  risk 0.00cvss —epss 0.02

  PHP before 4.4.3 and 5.x before 5.1.4 does not limit the character set of the session identifier (PHPSESSID) for third party session handlers, which might make it easier for remote attackers to exploit other vulnerabilities by inserting PHP code into the PHPSESSID, which is…

• CVE-2006-4023Aug 9, 2006
  PHP

  PHP
  risk 0.00cvss —epss 0.02

  The ip2long function in PHP 5.1.4 and earlier may incorrectly validate an arbitrary string and return a valid network IP address, which allows remote attackers to obtain network information and facilitate other attacks, as demonstrated using SQL injection in the X-FORWARDED-FOR…

• CVE-2006-3017Jun 14, 2006
  PHP

  PHP
  risk 0.00cvss —epss 0.04

  zend_hash_del_key_or_index in zend_hash.c in PHP before 4.4.3 and 5.x before 5.1.3 can cause zend_hash_del to delete the wrong element, which prevents a variable from being unset even when the PHP unset function is called, which might cause the variable's value to be used in…

• CVE-2006-3018Jun 14, 2006
  PHP

  PHP
  risk 0.00cvss —epss 0.02

  Unspecified vulnerability in the session extension functionality in PHP before 5.1.3 has unknown impact and attack vectors related to heap corruption.

• CVE-2006-3016Jun 14, 2006
  PHP

  PHP
  risk 0.00cvss —epss 0.02

  Unspecified vulnerability in session.c in PHP before 5.1.3 has unknown impact and attack vectors, related to "certain characters in session names," including special characters that are frequently associated with CRLF injection, SQL injection, cross-site scripting (XSS), and…

• CVE-2006-2660Jun 13, 2006
  PHP

  PHP
  risk 0.00cvss —epss 0.00

  Buffer consumption vulnerability in the tempnam function in PHP 5.1.4 and 4.x before 4.4.3 allows local users to bypass restrictions and create PHP files with fixed names in other directories via a pathname argument longer than MAXPATHLEN, which prevents a unique string from…

• CVE-2006-2563May 29, 2006
  PHP

  PHP
  risk 0.00cvss —epss 0.00

  The cURL library (libcurl) in PHP 4.4.2 and 5.1.4 allows attackers to bypass safe mode and read files via a file:// request containing null characters.

• CVE-2006-1991Apr 24, 2006
  PHP

  PHP
  risk 0.00cvss —epss 0.02

  The substr_compare function in string.c in PHP 5.1.2 allows context-dependent attackers to cause a denial of service (memory access violation) via an out-of-bounds offset argument.

• CVE-2006-1017Mar 7, 2006
  PHP

  PHP
  risk 0.00cvss —epss 0.03

  The c-client library 2000, 2001, or 2004 for PHP before 4.4.4 and 5.x before 5.1.5 do not check the (1) safe_mode or (2) open_basedir functions, and when used in applications that accept user-controlled input for the mailbox argument to the imap_open function, allow remote…