PHP
Page 8 of 8 — PHP CVEs from a corpus of 781, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2006-1991 | | 2006-04-24 | The substr_compare function in string.c in PHP 5.1.2 allows context-dependent attackers to cause a denial of service (memory access violation) via an out-of-bo… | |
CVE-2006-1990 | | 2006-04-24 | Integer overflow in the wordwrap function in string.c in PHP 4.4.2 and 5.1.2 might allow context-dependent attackers to execute arbitrary code via certain long… | |
CVE-2006-1549 | | 2006-04-10 | PHP 4.4.2 and 5.1.2 allows local users to cause a crash (segmentation fault) by defining and executing a recursive function. NOTE: it has been reported by a r… | |
CVE-2006-1608 | | 2006-04-10 | The copy function in file.c in PHP 4.4.2 and 5.1.2 allows local users to bypass safe mode and read arbitrary files via a source argument containing a compress… | |
CVE-2006-1494 | | 2006-04-10 | Directory traversal vulnerability in file.c in PHP 4.4.2 and 5.1.2 allows local users to bypass open_basedir restrictions allows remote attackers to create fil… | |
CVE-2006-0996 | | 2006-04-10 | Cross-site scripting (XSS) vulnerability in phpinfo (info.c) in PHP 5.1.2 and 4.4.2 allows remote attackers to inject arbitrary web script or HTML via long arr… | |
CVE-2006-1559 | | 2006-03-31 | SQL injection vulnerability in PHP Script Index allows remote attackers to execute arbitrary SQL commands via the search parameter. NOTE: the provenance of thi… | |
CVE-2006-1558 | | 2006-03-31 | Cross-site scripting (XSS) vulnerability in search.php in PHP Script Index allows remote attackers to inject arbitrary web script or HTML via the search parame… | |
CVE-2006-1490 | | 2006-03-29 | PHP before 5.1.3-RC1 might allow remote attackers to obtain portions of memory via crafted binary data sent to a script that processes user input in the html_e… | |
CVE-2006-1017 | | 2006-03-07 | The c-client library 2000, 2001, or 2004 for PHP before 4.4.4 and 5.x before 5.1.5 do not check the (1) safe_mode or (2) open_basedir functions, and when used… | |
CVE-2006-1015 | | 2006-03-07 | Argument injection vulnerability in certain PHP 3.x, 4.x, and 5.x applications, when used with sendmail and when accepting remote input for the additional_para… | |
CVE-2006-1014 | | 2006-03-07 | Argument injection vulnerability in certain PHP 4.x and 5.x applications, when used with sendmail and when accepting remote input for the additional_parameters… | |
CVE-2006-0208 | | 2006-01-13 | Multiple cross-site scripting (XSS) vulnerabilities in PHP 4.4.1 and 5.1.1, when display_errors and html_errors are on, allow remote attackers to inject arbitr… | |
CVE-2006-0207 | | 2006-01-13 | Multiple HTTP response splitting vulnerabilities in PHP 5.1.1 allow remote attackers to inject arbitrary HTTP headers via a crafted Set-Cookie header, related… | |
CVE-2006-0200 | | 2006-01-13 | Format string vulnerability in the error-reporting feature in the mysqli extension in PHP 5.1.0 and 5.1.1 might allow remote attackers to execute arbitrary cod… | |
CVE-2006-0144 | | 2006-01-09 | The proxy server feature in go-pear.php in PHP PEAR 0.2.2, as used in Apache2Triad, allows remote attackers to execute arbitrary PHP code by redirecting go-pea… | |
CVE-2006-0097 | | 2006-01-06 | Stack-based buffer overflow in the create_named_pipe function in libmysql.c in PHP 4.3.10 and 4.4.x before 4.4.3 for Windows allows attackers to execute arbitr… | |
CVE-2005-4154 | | 2005-12-11 | Unspecified vulnerability in PEAR installer 1.4.2 and earlier allows user-assisted attackers to execute arbitrary code via a crafted package that can execute c… | |
CVE-2005-3883 | | 2005-11-29 | CRLF injection vulnerability in the mb_send_mail function in PHP before 5.1.0 might allow remote attackers to inject arbitrary e-mail headers via line feeds (L… | |
CVE-2005-3353 | | 2005-11-18 | The exif_read_data function in the Exif module in PHP before 4.4.1 allows remote attackers to cause a denial of service (infinite loop) via a malformed JPEG im… | |
CVE-2005-3392 | | 2005-11-01 | Unspecified vulnerability in PHP before 4.4.1, when using the virtual function on Apache 2, allows remote attackers to bypass safe_mode and open_basedir direct… | |
CVE-2005-3391 | | 2005-11-01 | Multiple vulnerabilities in PHP before 4.4.1 allow remote attackers to bypass safe_mode and open_basedir restrictions via unknown attack vectors in (1) ext/cur… | |
CVE-2005-3390 | | 2005-11-01 | The RFC1867 file upload feature in PHP 4.x up to 4.4.0 and 5.x up to 5.0.5, when register_globals is enabled, allows remote attackers to modify the GLOBALS arr… | |
CVE-2005-3389 | | 2005-11-01 | The parse_str function in PHP 4.x up to 4.4.0 and 5.x up to 5.0.5, when called with only one parameter, allows remote attackers to enable the register_globals… | |
CVE-2005-3388 | | 2005-11-01 | Cross-site scripting (XSS) vulnerability in the phpinfo function in PHP 4.x up to 4.4.0 and 5.x up to 5.0.5 allows remote attackers to inject arbitrary web scr… | |
CVE-2005-3319 | | 2005-10-27 | The apache2handler SAPI (sapi_apache2.c) in the Apache module (mod_php) for PHP 5.x before 5.1.0 final and 4.4 before 4.4.1 final allows attackers to cause a d… | |
CVE-2005-3054 | | 2005-09-26 | fopen_wrappers.c in PHP 4.4.0, and possibly other versions, does not properly restrict access to other directories when the open_basedir directive includes a t… | |
CVE-2005-1921 | | 2005-07-05 | Eval injection vulnerability in PEAR XML_RPC 1.3.0 and earlier (aka XML-RPC or xmlrpc) and PHPXMLRPC (aka XML-RPC For PHP or php-xmlrpc) 1.1 and earlier, as us… | |
CVE-2005-1042 | | 2005-05-02 | Integer overflow in the exif_process_IFD_TAG function in exif.c in PHP before 4.3.11 may allow remote attackers to execute arbitrary code via an IFD tag that l… | |
CVE-2005-0596 | | 2005-05-02 | PHP 4 (PHP4) allows attackers to cause a denial of service (daemon crash) by using the readfile function on a file whose size is a multiple of the page size. | |
CVE-2005-0525 | | 2005-05-02 | The php_next_marker function in image.c for PHP 4.2.2, 4.3.9, 4.3.10 and 5.0.3, as reachable by the getimagesize PHP function, allows remote attackers to cause… | |
CVE-2005-0524 | | 2005-05-02 | The php_handle_iff function in image.c for PHP 4.2.2, 4.3.9, 4.3.10 and 5.0.3, as reachable by the getimagesize PHP function, allows remote attackers to cause… | |
CVE-2005-1043 | | 2005-04-14 | exif.c in PHP before 4.3.11 allows remote attackers to cause a denial of service (memory consumption and crash) via an EXIF header with a large IFD nesting lev… | |
CVE-2004-1065 | | 2005-01-10 | Buffer overflow in the exif_read_data function in PHP before 4.3.10 and PHP 5.x up to 5.0.2 allows remote attackers to execute arbitrary code via a long sectio… | |
CVE-2004-1064 | | 2005-01-10 | The safe mode checks in PHP 4.x to 4.3.9 and PHP 5.x to 5.0.2 truncate the file path before passing the data to the realpath function, which could allow attack… | |
CVE-2004-1063 | | 2005-01-10 | PHP 4.x to 4.3.9, and PHP 5.x to 5.0.2, when running in safe mode on a multithreaded Unix webserver, allows local users to bypass safe_mode_exec_dir restrictio… | |
CVE-2004-1020 | | 2005-01-10 | The addslashes function in PHP 4.3.9 does not properly escape a NULL (/0) character, which may allow remote attackers to read arbitrary files in PHP applicatio… | |
CVE-2004-1019 | | 2005-01-10 | The deserialization code in PHP before 4.3.10 and PHP 5.x up to 5.0.2 allows remote attackers to cause a denial of service and execute arbitrary code via untru… | |
CVE-2004-1018 | | 2005-01-10 | Multiple integer handling errors in PHP before 4.3.10 allow attackers to bypass safe mode restrictions, cause a denial of service, or execute arbitrary code vi… | |
CVE-2004-1392 | | 2004-12-31 | PHP 4.0 with cURL functions allows remote attackers to bypass the open_basedir setting and read arbitrary files via a file: URL argument to the curl_init funct… | |
CVE-2004-0959 | | 2004-11-03 | rfc1867.c in PHP before 5.0.2 allows local users to upload files to arbitrary locations via a PHP script with a certain MIME header that causes the "$_FILES" a… | |
CVE-2004-0958 | | 2004-11-03 | php_variables.c in PHP before 5.0.2 allows remote attackers to read sensitive memory contents via (1) GET, (2) POST, or (3) COOKIE GPC variables that end in an… | |
CVE-2004-0542 | | 2004-08-06 | PHP before 4.3.7 on Win32 platforms does not properly filter all shell metacharacters, which allows local or remote attackers to execute arbitrary code, overwr… | |
CVE-2004-0595 | | 2004-07-27 | The strip_tags function in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, does not filter null (\0) characters within tag names when restricting input to allowed… | |
CVE-2004-0594 | | 2004-07-27 | The memory_limit functionality in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, under certain conditions such as when register_globals is enabled, allows remote… | |
CVE-2003-1303 | | 2003-12-31 | Buffer overflow in the imap_fetch_overview function in the IMAP functionality (php_imap.c) in PHP before 4.3.3 allows remote attackers to cause a denial of ser… | |
CVE-2003-1302 | | 2003-12-31 | The IMAP functionality in PHP before 4.3.1 allows remote attackers to cause a denial of service via an e-mail message with a (1) To or (2) From header with an… | |
CVE-2003-0249 | | 2003-12-31 | PHP treats unknown methods such as "PoSt" as a GET request, which could allow attackers to intended access restrictions if PHP is running on a server that pass… | |
CVE-2003-0863 | | 2003-11-17 | The php_check_safe_mode_include_dir function in fopen_wrappers.c of PHP 4.3.x returns a success value (0) when the safe_mode_include_dir variable is not specif… | |
CVE-2003-0861 | | 2003-11-17 | Integer overflows in (1) base64_encode and (2) the GD library for PHP before 4.3.3 have unknown impact and unknown attack vectors. | |
CVE-2003-0860 | | 2003-11-17 | Buffer overflows in PHP before 4.3.3 have unknown impact and unknown attack vectors. | |
CVE-2003-0442 | | 2003-07-24 | Cross-site scripting (XSS) vulnerability in the transparent SID support capability for PHP before 4.3.2 (session.use_trans_sid) allows remote attackers to inse… | |
CVE-2003-0172 | | 2003-04-02 | Buffer overflow in openlog function for PHP 4.3.1 on Windows operating system, and possibly other OSes, allows remote attackers to cause a crash and possibly e… | |
CVE-2003-0166 | | 2003-04-02 | Integer signedness error in emalloc() function for PHP before 4.3.2 allow remote attackers to cause a denial of service (memory consumption) and possibly execu… | |
CVE-2003-0097 | | 2003-03-03 | Unknown vulnerability in CGI module for PHP 4.3.0 allows attackers to access arbitrary files as the PHP user, and possibly execute PHP code, by bypassing the C… | |
CVE-2002-1396 | | 2003-01-17 | Heap-based buffer overflow in the wordwrap function in PHP after 4.1.2 and before 4.3.0 may allow attackers to cause a denial of service or execute arbitrary c… | |
CVE-2002-2309 | | 2002-12-31 | php.exe in PHP 3.0 through 4.2.2, when running on Apache, does not terminate properly, which allows remote attackers to cause a denial of service via a direct… | |
CVE-2002-2215 | | 2002-12-31 | The imap_header function in the IMAP functionality for PHP before 4.3.0 allows remote attackers to cause a denial of service via an e-mail message with a large… | |
CVE-2002-2214 | | 2002-12-31 | The php_if_imap_mime_header_decode function in the IMAP functionality in PHP before 4.2.2 allows remote attackers to cause a denial of service (crash) via an e… | |
CVE-2002-2175 | | 2002-12-31 | phpSquidPass before 0.2 uses an incomplete regular expression to find a matching username in its database, which allows remote authenticated attackers to effec… | |
CVE-2002-1954 | | 2002-12-31 | Cross-site scripting (XSS) vulnerability in the phpinfo function in PHP 4.2.3 allows remote attackers to inject arbitrary web script or HTML via the query stri… | |
CVE-2002-1783 | | 2002-12-31 | CRLF injection vulnerability in PHP 4.2.1 through 4.2.3, when allow_url_fopen is enabled, allows remote attackers to modify HTTP headers for outgoing requests… | |
CVE-2002-0986 | | 2002-09-24 | The mail function in PHP 4.x to 4.2.2 does not filter ASCII control characters from its arguments, which could allow remote attackers to modify mail message co… | |
CVE-2002-0985 | | 2002-09-24 | Argument injection vulnerability in the mail function for PHP 4.x to 4.2.2 may allow attackers to bypass safe mode restrictions and modify command line argumen… | |
CVE-2002-0484 | | 2002-08-12 | move_uploaded_file in PHP does not does not check for the base directory (open_basedir), which could allow remote attackers to upload files to unintended locat… | |
CVE-2002-0717 | | 2002-07-26 | PHP 4.2.0 and 4.2.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an HTTP POST request with certain arguments in… | |
CVE-2002-0253 | | 2002-05-29 | PHP, when not configured with the "display_errors = Off" setting in php.ini, allows remote attackers to obtain the physical path for an include file via a trai… | |
CVE-2002-0229 | | 2002-05-16 | Safe Mode feature (safe_mode) in PHP 3.0 through 4.1.0 allows attackers with access to the MySQL database to bypass Safe Mode access restrictions and read arbi… | |
CVE-2002-0121 | | 2002-03-25 | PHP 4.0 through 4.1.1 stores session IDs in temporary files whose name contains the session ID, which allows local users to hijack web connections. | |
CVE-2002-0081 | | 2002-03-08 | Buffer overflows in (1) php_mime_split in PHP 4.1.0, 4.1.1, and 4.0.6 and earlier, and (2) php3_mime_split in PHP 3.0.x allows remote attackers to execute arbi… | |
CVE-2001-1247 | | 2001-12-06 | PHP 4.0.4pl1 and 4.0.5 in safe mode allows remote attackers to read and write files owned by the web server UID by uploading a PHP script that uses the error_l… | |
CVE-2001-1246 | | 2001-06-30 | PHP 4.0.5 through 4.1.0 in safe mode does not properly cleanse the 5th parameter to the mail() function, which allows local users and possibly remote attackers… | |
CVE-2001-0108 | | 2001-03-12 | PHP Apache module 4.0.4 and earlier allows remote attackers to bypass .htaccess access restrictions via a malformed HTTP request on an unrestricted page that c… | |
CVE-2001-1385 | | 2001-01-12 | The Apache module for PHP 4.0.0 through PHP 4.0.4, when disabled with the 'engine = off' option for a virtual host, may disable PHP for other virtual hosts, wh… | |
CVE-2000-0967 | | 2000-12-19 | PHP 3 and 4 do not properly cleanse user-injected format strings, which allows remote attackers to execute arbitrary commands by triggering error messages that… | |
CVE-2000-0860 | | 2000-11-14 | The file upload capability in PHP versions 3 and 4 allows remote attackers to read arbitrary files by setting hidden form fields whose names match the names of… | |
CVE-2000-0059 | | 2000-01-04 | PHP3 with safe_mode enabled does not properly filter shell metacharacters from commands that are executed by popen, which could allow remote attackers to execu… | |
CVE-1999-0068 | | 1997-10-19 | CGI PHP mylog script allows an attacker to read any file on the target server. | |
CVE-1999-0346 | | 1997-10-16 | CGI PHP mlog script allows an attacker to read any file on the target server. | |
CVE-1999-0238 | | 1997-08-01 | php.cgi allows attackers to read any file on the system. | |
CVE-1999-0058 | | 1997-04-17 | Buffer overflow in PHP cgi program, php.cgi allows shell access. |