Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

php php 4.3.5 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2005-1042
Integer overflow in the exif_process_IFD_TAG function in exif.c in PHP prior to 4.3.11 may allow remote malicious users to execute arbitrary code via an IFD tag that leads to a negative byte count.
Php Php 4.3.4Php Php 4.3.5Php Php 4.3.2Php Php 4.3.3Php Php 4.3.1Php Php 4.3.10Php Php 4.3.8Php Php 4.3.9Php Php 4.3.0Php Php 4.3.6Php Php 4.3.7
NA
CVE-2006-1014
Argument injection vulnerability in certain PHP 4.x and 5.x applications, when used with sendmail and when accepting remote input for the additional_parameters argument to the mb_send_mail function, allows context-dependent malicious users to read and create arbitrary files by pr...
Php Php 4.2Php Php 4.3.11Php Php 4.3.3Php Php 4.4.0Php Php 4.4.1Php Php 5.0.0Php Php 5.0.1Php Php 5.0Php Php 5.1.0Php Php 4.0.0Php Php 4.3.6Php Php 4.3.7Php Php 5.0.4Php Php 5.0.5Php Php 4.3.4Php Php 4.3.5Php Php 5.0.2Php Php 5.0.3Php Php 4.3.10Php Php 4.3.8Php Php 4.3.9
NA
CVE-2007-2727
The mcrypt_create_iv function in ext/mcrypt/mcrypt.c in PHP prior to 4.4.7, 5.2.1, and possibly 5.0.x and other PHP 5 versions, calls php_rand_r with an uninitialized seed variable and therefore always generates the same initialization vector (IV), which might allow context-depen...
Php Php 4.3.9Php Php 4.2.0Php Php 4.1.0Php Php 4.3.4Php Php 4.0.4Php Php 4.3.0Php Php 4.0.5Php Php 4.3.6Php Php 4.0.7Php Php 4.3.11Php Php 4.3.2Php Php 4.2.2Php Php 4.0.3Php Php 4.3.7Php Php 4.0.6Php Php 4.1.2Php Php 4.0.1Php Php 4.3.3Php Php 4.1.1Php Php 4.3.1Php Php 4.3.10Php Php 4.0.2
NA
CVE-2005-3353
The exif_read_data function in the Exif module in PHP prior to 4.4.1 allows remote malicious users to cause a denial of service (infinite loop) via a malformed JPEG image.
Php Php 4.0.0Php Php 4.1.0Php Php 4.1.1Php Php 4.1.2Php Php 4.3.10Php Php 4.3.11Php Php 4.3.8Php Php 4.3.9Php Php 4.0.1Php Php 4.0.2Php Php 4.2.0Php Php 4.2.1Php Php 4.3.2Php Php 4.3.3Php Php 4.4.0Php Php 4.0.5Php Php 4.0.6Php Php 4.3.0Php Php 4.3.1Php Php 4.3.6Php Php 4.3.7Php Php 4.0.3
NA
CVE-2005-3883
CRLF injection vulnerability in the mb_send_mail function in PHP prior to 5.1.0 might allow remote malicious users to inject arbitrary e-mail headers via line feeds (LF) in the "To" address argument.
Php Php 4.0.7Php Php 4.1.0Php Php 4.2Php Php 4.3.0Php Php 4.3.1Php Php 4.3.6Php Php 4.3.7Php Php 5.0.2Php Php 5.0.3Php Php 4.1.1Php Php 4.1.2Php Php 4.3.10Php Php 4.3.11Php Php 4.3.8Php Php 4.3.9Php Php 5.0.4Php Php 5.0.5Php Php 4.2.2Php Php 4.2.3Php Php 4.3.4Php Php 4.3.5Php Php 5.0.0
NA
CVE-2006-2660
Buffer consumption vulnerability in the tempnam function in PHP 5.1.4 and 4.x prior to 4.4.3 allows local users to bypass restrictions and create PHP files with fixed names in other directories via a pathname argument longer than MAXPATHLEN, which prevents a unique string from be...
Php Php 4.0.4Php Php 4.0.5Php Php 4.2.3Php Php 4.3.0Php Php 4.3.1Php Php 4.3.6Php Php 4.3.7Php Php 5.1.4Php Php 4.0.2Php Php 4.0.3Php Php 4.2.1Php Php 4.2.2Php Php 4.3.4Php Php 4.3.5Php Php 4.4.2Php Php 4.4.3Php Php 4.1.0Php Php 4.1.1Php Php 4.3.10Php Php 4.3.11Php Php 4.3.8Php Php 4.3.9
NA
CVE-2006-0208
Multiple cross-site scripting (XSS) vulnerabilities in PHP 4.4.1 and 5.1.1, when display_errors and html_errors are on, allow remote malicious users to inject arbitrary web script or HTML via inputs to PHP applications that are not filtered when they are included in the resulting...
Php Php 4.0.5Php Php 4.0.6Php Php 4.0Php Php 4.1.0Php Php 4.3.0Php Php 4.3.1Php Php 4.3.10Php Php 4.3.7Php Php 4.3.8Php Php 5.0.0Php Php 5.1.0Php Php 5.1.1Php Php 4.0.0Php Php 4.1.1Php Php 4.1.2Php Php 4.3.11Php Php 4.3.2Php Php 4.3.9Php Php 4.4.1Php Php 4.0.1Php Php 4.0.2Php Php 4.2.0
NA
CVE-2007-2511
Buffer overflow in the user_filter_factory_create function in PHP prior to 5.2.2 has unknown impact and local attack vectors.
Php Php 4.0.3Php Php 4.0.4Php Php 4.1.0Php Php 4.1.1Php Php 4.3.1Php Php 4.3.10Php Php 4.3.8Php Php 4.3.9Php Php 4.0.2Php Php 4.0.7Php Php 4.2.3Php Php 4.3.0Php Php 4.3.5Php Php 4.3.6Php Php 4.3.7Php Php 4.4.4Php Php 4.4.5Php Php 4.0.0Php Php 4.0.1Php Php 4.0.5Php Php 4.0.6Php Php 4.1.2
NA
CVE-2005-3319
The apache2handler SAPI (sapi_apache2.c) in the Apache module (mod_php) for PHP 5.x prior to 5.1.0 final and 4.4 prior to 4.4.1 final allows malicious users to cause a denial of service (segmentation fault) via the session.save_path option in a .htaccess file or VirtualHost.
Php Php 4.0.1Php Php 4.0.7Php Php 4.0.0Php Php 4.0.5Php Php 4.0.6Php Php 4.1.2Php Php 4.2.0Php Php 4.3.10Php Php 4.3.11Php Php 4.3.9Php Php 4.4.0Php Php 5.0Php Php 4.0.2Php Php 4.2.3Php Php 4.2Php Php 4.3.4Php Php 4.3.5Php Php 5.0.2Php Php 5.0.3Php Php 4.2.1Php Php 4.2.2Php Php 4.3.2
NA
CVE-2005-3388
Cross-site scripting (XSS) vulnerability in the phpinfo function in PHP 4.x up to 4.4.0 and 5.x up to 5.0.5 allows remote malicious users to inject arbitrary web script or HTML via a crafted URL with a "stacked array assignment."
Php Php 4.3.9Php Php 4.2.0Php Php 5.0.0Php Php 4.1.0Php Php 4.3.4Php Php 4.0.4Php Php 4.3.0Php Php 4.0.5Php Php 5.0.5Php Php 4.3.6Php Php 5.0.1Php Php 4.0.7Php Php 4.3.7Php Php 5.0.4Php Php 4.2.2Php Php 4.3.2Php Php 4.3.11Php Php 4.0.0Php Php 4.0.3Php Php 4.0.2Php Php 4.3.3Php Php 4.1.1
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook