Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

php php 3.0.15 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2002-1783
CRLF injection vulnerability in PHP 4.2.1 up to and including 4.2.3, when allow_url_fopen is enabled, allows remote malicious users to modify HTTP headers for outgoing requests by causing CRLF sequences to be injected into arguments that are passed to the (1) fopen or (2) file fu...
Php Php 3.0.14Php Php 3.0.15Php Php 4.0.6Php Php 4.0.7Php Php 4.2.3Php Php 3.0.18Php Php 4.0.3Php Php 4.1.2Php Php 4.2.0Php Php 4.0.4Php Php 4.0.5Php Php 4.2.1Php Php 4.2.2Php Php 3.0.16Php Php 3.0.17Php Php 4.1.0Php Php 4.1.1
NA
CVE-2008-1488
Stack-based buffer overflow in apc.c in Alternative PHP Cache (APC) 3.0.11 up to and including 3.0.16 allows remote malicious users to execute arbitrary code via a long filename.
Pecl-php Alternative Php Cache 3.0.12p2Pecl-php Alternative Php Cache 3.0.13Pecl-php Alternative Php Cache 3.0.11Pecl-php Alternative Php Cache 3.0.16Pecl-php Alternative Php Cache 3.0.14Pecl-php Alternative Php Cache 3.0.15Pecl-php Alternative Php Cache 3.0.12Pecl-php Alternative Php Cache 3.0.12p1
NA
CVE-2002-0484
move_uploaded_file in PHP does not does not check for the base directory (open_basedir), which could allow remote malicious users to upload files to unintended locations on the system.
Php Php 3.0.11Php Php 3.0.12Php Php 3.0.3Php Php 3.0.4Php Php 4.0.1Php Php 4.0.6Php Php 4.0.7Php Php 3.0.1Php Php 3.0.10Php Php 3.0.17Php Php 3.0.18Php Php 3.0.2Php Php 3.0.9Php Php 4.0Php Php 4.0.4Php Php 4.0.5Php Php 4.1.2Php Php 3.0Php Php 3.0.15Php Php 3.0.16Php Php 3.0.7Php Php 3.0.8
NA
CVE-2002-2309
php.exe in PHP 3.0 up to and including 4.2.2, when running on Apache, does not terminate properly, which allows remote malicious users to cause a denial of service via a direct request without arguments.
Php Php 3.0.1Php Php 3.0.11Php Php 3.0.16Php Php 3.0.18Php Php 3.0.8Php Php 4.0Php Php 4.0.4Php Php 4.0.6Php Php 4.1.0Php Php 4.1.2Php Php 4.2.1Php Php 3.0.12Php Php 3.0.13Php Php 3.0.14Php Php 3.0.15Php Php 4.0.1Php Php 4.0.2Php Php 4.0.3Php Php 4.2.2Php Php 3.0.3Php Php 3.0.4Php Php 3.0.5
NA
CVE-2002-2215
The imap_header function in the IMAP functionality for PHP prior to 4.3.0 allows remote malicious users to cause a denial of service via an e-mail message with a large number of "To" addresses, which triggers an error in the rfc822_write_address function.
Php Php 3.0.4Php Php 3.0.5Php Php 3.0.6Php Php 3.0.7Php Php 4.0.6Php Php 4.0.7Php Php 4.2.2Php Php 4.2Php PhpPhp Php 3.0.1Php Php 3.0.11Php Php 3.0.18Php Php 3.0.3Php Php 3.0.8Php Php 4.0Php Php 4.0.4Php Php 4.0.5Php Php 4.1.1Php Php 4.2.0Php Php 3.0.12Php Php 3.0.13Php Php 3.0.14
NA
CVE-2005-3391
Multiple vulnerabilities in PHP prior to 4.4.1 allow remote malicious users to bypass safe_mode and open_basedir restrictions via unknown attack vectors in (1) ext/curl and (2) ext/gd.
Php Php 3.0Php Php 3.0.1Php Php 3.0.17Php Php 3.0.18Php Php 3.0.8Php Php 3.0.9Php Php 4.0.3Php Php 4.0.4Php Php 4.0.5Php Php 4.1.1Php Php 4.1.2Php Php 4.3.1Php Php 4.3.10Php Php 4.3.7Php Php 4.3.8Php Php 4.3.9Php Php 3.0.10Php Php 3.0.11Php Php 3.0.12Php Php 3.0.2Php Php 3.0.3Php Php 4.0.0
NA
CVE-2005-3392
Unspecified vulnerability in PHP prior to 4.4.1, when using the virtual function on Apache 2, allows remote malicious users to bypass safe_mode and open_basedir directives.
Php Php 3.0.12Php Php 3.0.13Php Php 3.0.3Php Php 3.0.4Php Php 3.0.14Php Php 3.0.15Php Php 3.0.5Php Php 3.0.6Php Php 4.0.2Php Php 4.0.3Php Php 4.0.7Php Php 4.2.3Php Php 4.2Php Php 4.3.5Php Php 4.3.6Php Php 3.0.10Php Php 3.0.11Php Php 3.0.18Php Php 3.0.2Php Php 3.0.9Php Php 4.0.0Php Php 4.0.1
NA
CVE-2009-3558
The posix_mkfifo function in ext/posix/posix.c in PHP prior to 5.2.12 and 5.3.x prior to 5.3.1 allows context-dependent malicious users to bypass open_basedir restrictions, and create FIFO files, via the pathname and mode arguments, as demonstrated by creating a .htaccess file.
Php Php 2.0Php Php 2.0b10Php Php 3.0.15Php Php 3.0.16Php Php 3.0.6Php Php 3.0.7Php Php 4.0.3Php Php 4.0.4Php Php 4.0Php Php 4.1.0Php Php 4.2.2Php Php 4.2.3Php Php 4.3.2Php Php 4.3.7Php Php 5.2.5Php Php 5.2.6Php Php 3.0.10Php Php 3.0.11Php Php 3.0.2Php Php 3.0.3Php Php 4.0.0Php Php 4.0.7
NA
CVE-2005-3390
The RFC1867 file upload feature in PHP 4.x up to 4.4.0 and 5.x up to 5.0.5, when register_globals is enabled, allows remote malicious users to modify the GLOBALS array and bypass security protections of PHP applications via a multipart/form-data POST request with a "GLOBALS&...
Php Php 3.0.14Php Php 3.0.15Php Php 3.0.5Php Php 3.0.6Php Php 4.0.2Php Php 4.0.3Php Php 4.0.7Php Php 4.2.3Php Php 4.2Php Php 4.3.5Php Php 4.3.6Php Php 5.0.2Php Php 5.0.3Php Php 3.0Php Php 3.0.1Php Php 3.0.16Php Php 3.0.17Php Php 3.0.7Php Php 3.0.8Php Php 4.0.4Php Php 4.1.0Php Php 4.1.1
NA
CVE-2007-1378
The ovrimos_longreadlen function in the Ovrimos extension for PHP prior to 4.4.5 allows context-dependent malicious users to write to arbitrary memory locations via the result_id and length arguments.
Php Php 3.0.10Php Php 3.0.11Php Php 3.0.12Php Php 3.0.13Php Php 3.0.9Php Php 4.0Php Php 4.0.0Php Php 4.0.1Php Php 4.3.10Php Php 4.3.11Php Php 4.3.2Php Php 4.3.3Php Php 3.0Php Php 3.0.15Php Php 3.0.17Php Php 3.0.5Php Php 3.0.7Php Php 4.0.3Php Php 4.0.7Php Php 4.2.3Php Php 4.3.0Php Php 4.3.5
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2006-4304CVE-2024-4240arbitrary CVE-2024-31601XSSCVE-2023-20198CVE-2024-4256CVE-2024-3342encryption
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook