PHP

CVEs (762)

• CVE-2005-0596May 2, 2005
  PHP

  PHP
  risk 0.00cvss —epss 0.00

  PHP 4 (PHP4) allows attackers to cause a denial of service (daemon crash) by using the readfile function on a file whose size is a multiple of the page size.

• CVE-2005-1043Apr 14, 2005
  PHP

  PHP
  risk 0.00cvss —epss 0.02

  exif.c in PHP before 4.3.11 allows remote attackers to cause a denial of service (memory consumption and crash) via an EXIF header with a large IFD nesting level, which causes significant stack recursion.

• CVE-2004-1064Jan 10, 2005
  PHP

  PHP
  risk 0.00cvss —epss 0.04

  The safe mode checks in PHP 4.x to 4.3.9 and PHP 5.x to 5.0.2 truncate the file path before passing the data to the realpath function, which could allow attackers to bypass safe mode. NOTE: this issue was originally REJECTed by its CNA before publication, but that decision is…

• CVE-2004-1063Jan 10, 2005
  PHP

  PHP
  risk 0.00cvss —epss 0.04

  PHP 4.x to 4.3.9, and PHP 5.x to 5.0.2, when running in safe mode on a multithreaded Unix webserver, allows local users to bypass safe_mode_exec_dir restrictions and execute commands outside of the intended safe_mode_exec_dir via shell metacharacters in the current directory…

• CVE-2004-0263Nov 23, 2004
  PHP

  PHP
  risk 0.00cvss —epss 0.04

  PHP 4.3.4 and earlier in Apache 1.x and 2.x (mod_php) can leak global variables between virtual hosts that are handled by the same Apache child process but have different settings, which could allow remote attackers to obtain sensitive information.

• CVE-2004-0959Nov 3, 2004
  PHP

  PHP
  risk 0.00cvss —epss 0.01

  rfc1867.c in PHP before 5.0.2 allows local users to upload files to arbitrary locations via a PHP script with a certain MIME header that causes the "$_FILES" array to be modified.

• CVE-2003-1302Dec 31, 2003
  PHP

  PHP
  risk 0.00cvss —epss 0.01

  The IMAP functionality in PHP before 4.3.1 allows remote attackers to cause a denial of service via an e-mail message with a (1) To or (2) From header with an address that contains a large number of "\" (backslash) characters.

• CVE-2003-0249Dec 31, 2003
  PHP

  PHP
  risk 0.00cvss —epss 0.01

  PHP treats unknown methods such as "PoSt" as a GET request, which could allow attackers to intended access restrictions if PHP is running on a server that passes on all methods, such as Apache httpd 2.0, as demonstrated using a Limit directive. NOTE: this issue has been…

• CVE-2003-0860Nov 17, 2003
  PHP

  PHP
  risk 0.00cvss —epss 0.02

  Buffer overflows in PHP before 4.3.3 have unknown impact and unknown attack vectors.

• CVE-2003-0861Nov 17, 2003
  PHP

  PHP
  risk 0.00cvss —epss 0.02

  Integer overflows in (1) base64_encode and (2) the GD library for PHP before 4.3.3 have unknown impact and unknown attack vectors.

• CVE-2003-0097Mar 3, 2003
  PHP

  PHP
  risk 0.00cvss —epss 0.02

  Unknown vulnerability in CGI module for PHP 4.3.0 allows attackers to access arbitrary files as the PHP user, and possibly execute PHP code, by bypassing the CGI force redirect settings (cgi.force_redirect or --enable-force-cgi-redirect).

• CVE-2002-1396Jan 17, 2003
  PHP

  PHP
  risk 0.00cvss —epss 0.04

  Heap-based buffer overflow in the wordwrap function in PHP after 4.1.2 and before 4.3.0 may allow attackers to cause a denial of service or execute arbitrary code.

• CVE-2002-2214Dec 31, 2002
  PHP

  PHP
  risk 0.00cvss —epss 0.02

  The php_if_imap_mime_header_decode function in the IMAP functionality in PHP before 4.2.2 allows remote attackers to cause a denial of service (crash) via an e-mail header with a long "To" header.

• CVE-2002-2215Dec 31, 2002
  PHP

  PHP
  risk 0.00cvss —epss 0.01

  The imap_header function in the IMAP functionality for PHP before 4.3.0 allows remote attackers to cause a denial of service via an e-mail message with a large number of "To" addresses, which triggers an error in the rfc822_write_address function.

• CVE-2002-0985Sep 24, 2002
  PHP

  PHP
  risk 0.00cvss —epss 0.03

  Argument injection vulnerability in the mail function for PHP 4.x to 4.2.2 may allow attackers to bypass safe mode restrictions and modify command line arguments to the MTA (e.g. sendmail) in the 5th argument to mail(), altering MTA behavior and possibly executing commands.

• CVE-2002-0986Sep 24, 2002
  PHP

  PHP
  risk 0.00cvss —epss 0.05

  The mail function in PHP 4.x to 4.2.2 does not filter ASCII control characters from its arguments, which could allow remote attackers to modify mail message content, including mail headers, and possibly use PHP as a "spam proxy."

• CVE-2002-0253May 29, 2002
  PHP

  PHP
  risk 0.00cvss —epss 0.05

  PHP, when not configured with the "display_errors = Off" setting in php.ini, allows remote attackers to obtain the physical path for an include file via a trailing slash in a request to a directly accessible PHP program, which modifies the base path, causes the include directive…

• CVE-2002-0121Mar 25, 2002
  PHP

  PHP
  risk 0.00cvss —epss 0.01

  PHP 4.0 through 4.1.1 stores session IDs in temporary files whose name contains the session ID, which allows local users to hijack web connections.

• CVE-2001-0108Mar 12, 2001
  PHP

  PHP
  risk 0.00cvss —epss 0.02

  PHP Apache module 4.0.4 and earlier allows remote attackers to bypass .htaccess access restrictions via a malformed HTTP request on an unrestricted page that causes PHP to use those access controls on the next page that is requested.

• CVE-2001-1385Jan 12, 2001
  PHP

  PHP
  risk 0.00cvss —epss 0.02

  The Apache module for PHP 4.0.0 through PHP 4.0.4, when disabled with the 'engine = off' option for a virtual host, may disable PHP for other virtual hosts, which could cause Apache to serve the source code of PHP scripts.