PHP

CVEs (730)

• CVE-2006-0208Jan 13, 2006
  PHP

  PHP
  risk 0.00cvss —epss 0.04

  Multiple cross-site scripting (XSS) vulnerabilities in PHP 4.4.1 and 5.1.1, when display_errors and html_errors are on, allow remote attackers to inject arbitrary web script or HTML via inputs to PHP applications that are not filtered when they are included in the resulting…

• CVE-2006-0207Jan 13, 2006
  PHP

  PHP
  risk 0.00cvss —epss 0.04

  Multiple HTTP response splitting vulnerabilities in PHP 5.1.1 allow remote attackers to inject arbitrary HTTP headers via a crafted Set-Cookie header, related to the (1) session extension (aka ext/session) and the (2) header function.

• CVE-2005-3883Nov 29, 2005
  PHP

  PHP
  risk 0.00cvss —epss 0.03

  CRLF injection vulnerability in the mb_send_mail function in PHP before 5.1.0 might allow remote attackers to inject arbitrary e-mail headers via line feeds (LF) in the "To" address argument.

• CVE-2005-3319Oct 27, 2005
  PHP

  PHP
  risk 0.00cvss —epss 0.01

  The apache2handler SAPI (sapi_apache2.c) in the Apache module (mod_php) for PHP 5.x before 5.1.0 final and 4.4 before 4.4.1 final allows attackers to cause a denial of service (segmentation fault) via the session.save_path option in a .htaccess file or VirtualHost.

• CVE-2005-3054Sep 26, 2005
  PHP

  PHP
  risk 0.00cvss —epss 0.00

  fopen_wrappers.c in PHP 4.4.0, and possibly other versions, does not properly restrict access to other directories when the open_basedir directive includes a trailing slash, which allows PHP scripts in one directory to access files in other directories whose names are substrings…

• CVE-2005-0596May 2, 2005
  PHP

  PHP
  risk 0.00cvss —epss 0.00

  PHP 4 (PHP4) allows attackers to cause a denial of service (daemon crash) by using the readfile function on a file whose size is a multiple of the page size.

• CVE-2005-0524May 2, 2005
  PHP

  PHP
  risk 0.00cvss —epss 0.03

  The php_handle_iff function in image.c for PHP 4.2.2, 4.3.9, 4.3.10 and 5.0.3, as reachable by the getimagesize PHP function, allows remote attackers to cause a denial of service (infinite loop) via a -8 size value.

• CVE-2005-0525May 2, 2005
  PHP

  PHP
  risk 0.00cvss —epss 0.03

  The php_next_marker function in image.c for PHP 4.2.2, 4.3.9, 4.3.10 and 5.0.3, as reachable by the getimagesize PHP function, allows remote attackers to cause a denial of service (infinite loop) via a JPEG image with an invalid marker value, which causes a negative length value…

• CVE-2005-1042May 2, 2005
  PHP

  PHP
  risk 0.00cvss —epss 0.04

  Integer overflow in the exif_process_IFD_TAG function in exif.c in PHP before 4.3.11 may allow remote attackers to execute arbitrary code via an IFD tag that leads to a negative byte count.

• CVE-2005-1043Apr 14, 2005
  PHP

  PHP
  risk 0.00cvss —epss 0.02

  exif.c in PHP before 4.3.11 allows remote attackers to cause a denial of service (memory consumption and crash) via an EXIF header with a large IFD nesting level, which causes significant stack recursion.

• CVE-2004-1064Jan 10, 2005
  PHP

  PHP
  risk 0.00cvss —epss 0.04

  The safe mode checks in PHP 4.x to 4.3.9 and PHP 5.x to 5.0.2 truncate the file path before passing the data to the realpath function, which could allow attackers to bypass safe mode. NOTE: this issue was originally REJECTed by its CNA before publication, but that decision is…

• CVE-2004-1063Jan 10, 2005
  PHP

  PHP
  risk 0.00cvss —epss 0.04

  PHP 4.x to 4.3.9, and PHP 5.x to 5.0.2, when running in safe mode on a multithreaded Unix webserver, allows local users to bypass safe_mode_exec_dir restrictions and execute commands outside of the intended safe_mode_exec_dir via shell metacharacters in the current directory…

• CVE-2004-0263Nov 23, 2004
  PHP

  PHP
  risk 0.00cvss —epss 0.03

  PHP 4.3.4 and earlier in Apache 1.x and 2.x (mod_php) can leak global variables between virtual hosts that are handled by the same Apache child process but have different settings, which could allow remote attackers to obtain sensitive information.

• CVE-2004-0959Nov 3, 2004
  PHP

  PHP
  risk 0.00cvss —epss 0.01

  rfc1867.c in PHP before 5.0.2 allows local users to upload files to arbitrary locations via a PHP script with a certain MIME header that causes the "$_FILES" array to be modified.

• CVE-2003-0249Dec 31, 2003
  PHP

  PHP
  risk 0.00cvss —epss 0.01

  PHP treats unknown methods such as "PoSt" as a GET request, which could allow attackers to intended access restrictions if PHP is running on a server that passes on all methods, such as Apache httpd 2.0, as demonstrated using a Limit directive. NOTE: this issue has been…

• CVE-2003-1302Dec 31, 2003
  PHP

  PHP
  risk 0.00cvss —epss 0.01

  The IMAP functionality in PHP before 4.3.1 allows remote attackers to cause a denial of service via an e-mail message with a (1) To or (2) From header with an address that contains a large number of "\" (backslash) characters.

• CVE-2003-0861Nov 17, 2003
  PHP

  PHP
  risk 0.00cvss —epss 0.01

  Integer overflows in (1) base64_encode and (2) the GD library for PHP before 4.3.3 have unknown impact and unknown attack vectors.

• CVE-2003-0860Nov 17, 2003
  PHP

  PHP
  risk 0.00cvss —epss 0.02

  Buffer overflows in PHP before 4.3.3 have unknown impact and unknown attack vectors.

• CVE-2003-0097Mar 3, 2003
  PHP

  PHP
  risk 0.00cvss —epss 0.02

  Unknown vulnerability in CGI module for PHP 4.3.0 allows attackers to access arbitrary files as the PHP user, and possibly execute PHP code, by bypassing the CGI force redirect settings (cgi.force_redirect or --enable-force-cgi-redirect).

• CVE-2002-1396Jan 17, 2003
  PHP

  PHP
  risk 0.00cvss —epss 0.04

  Heap-based buffer overflow in the wordwrap function in PHP after 4.1.2 and before 4.3.0 may allow attackers to cause a denial of service or execute arbitrary code.