Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

php php 4.3.8 vulnerabilities and exploits

(subscribe to this query)
9.8
CVSSv3
CVE-2019-11325
An issue exists in Symfony prior to 4.2.12 and 4.3.x prior to 4.3.8. The VarExport component incorrectly escapes strings, allowing some specially crafted ones to escalate to execution of arbitrary PHP code. This is related to symfony/var-exporter.
Sensiolabs Symfony
8.8
CVSSv3
CVE-2017-10993
Contao prior to 3.5.28 and 4.x prior to 4.4.1 allows remote malicious users to include and execute arbitrary local PHP files via a crafted parameter in a URL, aka Directory Traversal.
Contao Contao Cms 4.3.1Contao Contao Cms 4.3.2Contao Contao Cms 4.3.3Contao Contao Cms 4.3.5Contao Contao Cms 4.2.0Contao Contao Cms 4.1.1Contao Contao CmsContao Contao Cms 4.3.10Contao Contao Cms 4.3.11Contao Contao Cms 4.3.0Contao Contao Cms 4.1.0Contao Contao Cms 4.0.1Contao Contao Cms 4.0.2Contao Contao Cms 4.0.3Contao Contao Cms 4.4.0Contao Contao Cms 4.3.6Contao Contao Cms 4.3.8Contao Contao Cms 4.2.2Contao Contao Cms 4.2.4Contao Contao Cms 4.1.3Contao Contao Cms 4.0.4Contao Contao Cms 4.0.0
NA
CVE-2013-4635
Integer overflow in the SdnToJewish function in jewish.c in the Calendar component in PHP prior to 5.3.26 and 5.4.x prior to 5.4.16 allows context-dependent malicious users to cause a denial of service (application hang) via a large argument to the jdtojewish function.
Php Php 5.3.20Php Php 5.3.19Php Php 5.3.8Php Php 5.3.11Php Php 5.3.5Php Php 5.3.9Php Php 5.2.12Php Php 5.2.10Php Php 5.2.13Php Php 5.2.4Php Php 5.2.3Php Php 5.1.1Php Php 5.1.0Php Php 5.0.0Php Php 4.3.10Php Php 4.3.5Php Php 4.2.1Php Php 4.4.7Php Php 4.3.0Php Php 4.4.3Php Php 4.4.4Php Php 4.0
NA
CVE-2013-2110
Heap-based buffer overflow in the php_quot_print_encode function in ext/standard/quot_print.c in PHP prior to 5.3.26 and 5.4.x prior to 5.4.16 allows remote malicious users to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted ar...
Php Php 5.3.20Php Php 5.3.12Php Php 5.3.8Php Php 5.3.5Php Php 5.3.9Php Php 5.2.12Php Php 5.2.10Php Php 5.2.6Php Php 5.2.4Php Php 5.1.1Php Php 5.1.0Php Php 5.0.0Php Php 4.3.5Php Php 4.2.1Php Php 4.4.6Php Php 4.4.7Php Php 4.4.2Php Php 4.4.3Php Php 4.0Php Php 4.0.6Php Php 4.1.0Php Php 4.0.7
NA
CVE-2013-1635
ext/soap/soap.c in PHP prior to 5.3.22 and 5.4.x prior to 5.4.13 does not validate the relationship between the soap.wsdl_cache_dir directive and the open_basedir directive, which allows remote malicious users to bypass intended access restrictions by triggering the creation of c...
Php Php 4.3.9Php Php 4.4.9Php Php 3.0Php PhpPhp Php 5.2.9Php Php 4.0Php Php 3.0.5Php Php 3.0.11Php Php 5.3.10Php Php 5.1.5Php Php 5.3.6Php Php 5.3.9Php Php 5.1.2Php Php 5.3.1Php Php 4.2.0Php Php 5.1.1Php Php 3.0.1Php Php 5.3.18Php Php 5.2.14Php Php 3.0.2Php Php 4.4.4Php Php 5.0.0
NA
CVE-2013-1643
The SOAP parser in PHP prior to 5.3.23 and 5.4.x prior to 5.4.13 allows remote malicious users to read arbitrary files via a SOAP WSDL file containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue in the ...
Php Php 4.3.9Php Php 4.4.9Php Php 3.0Php PhpPhp Php 5.2.9Php Php 4.0Php Php 3.0.5Php Php 3.0.11Php Php 5.3.10Php Php 5.1.5Php Php 5.3.6Php Php 5.3.9Php Php 5.1.2Php Php 5.3.1Php Php 4.2.0Php Php 5.1.1Php Php 3.0.1Php Php 5.3.18Php Php 5.2.14Php Php 3.0.2Php Php 4.4.4Php Php 5.0.0
NA
CVE-2012-2688
Unspecified vulnerability in the _php_stream_scandir function in the stream implementation in PHP prior to 5.3.15 and 5.4.x prior to 5.4.5 has unknown impact and remote attack vectors, related to an "overflow."
Php PhpPhp Php 5.3.1Php Php 5.3.7Php Php 5.3.12Php Php 5.3.8Php Php 5.3.11Php Php 5.3.4Php Php 5.3.3Php Php 5.3.0Php Php 5.3.2Php Php 5.3.10Php Php 5.2.15Php Php 5.2.11Php Php 5.2.7Php Php 5.2.1Php Php 5.2.2Php Php 5.1.5Php Php 5.0.5Php Php 5.0.2Php Php 5.0.1Php Php 4.3.2Php Php 4.3.11
NA
CVE-2012-3365
The SQLite functionality in PHP prior to 5.3.15 allows remote malicious users to bypass the open_basedir protection mechanism via unspecified vectors.
Php Php 5.3.11Php Php 5.3.4Php Php 5.3.13Php Php 5.3.2Php Php 5.2.13Php Php 5.2.5Php Php 5.2.3Php Php 5.2.14Php Php 5.1.6Php Php 5.1.4Php Php 5.0.0Php Php 4.3.10Php Php 4.3.1Php Php 4.4.8Php Php 4.2.0Php Php 4.3.0Php Php 4.3.7Php Php 4.4.4Php Php 4.0Php Php 4.0.5Php Php 4.0.4Php Php 3.0.11
NA
CVE-2010-5099
The fileDenyPattern functionality in the PHP file inclusion protection API in TYPO3 4.2.x prior to 4.2.16, 4.3.x prior to 4.3.9, and 4.4.x prior to 4.4.5 does not properly filter file types, which allows remote malicious users to bypass intended access restrictions and access arb...
Typo3 Typo3 4.2.0Typo3 Typo3 4.2.7Typo3 Typo3 4.2.8Typo3 Typo3 4.2.15Typo3 Typo3 4.2.3Typo3 Typo3 4.2.4Typo3 Typo3 4.2.11Typo3 Typo3 4.2.12Typo3 Typo3 4.2.5Typo3 Typo3 4.2.6Typo3 Typo3 4.2.13Typo3 Typo3 4.2.14Typo3 Typo3 4.2.1Typo3 Typo3 4.2.2Typo3 Typo3 4.2.9Typo3 Typo3 4.2.10Typo3 Typo3 4.3.7Typo3 Typo3 4.3.8Typo3 Typo3 4.3.2Typo3 Typo3 4.3.3Typo3 Typo3 4.3.4Typo3 Typo3 4.3.5
NA
CVE-2012-2376
Buffer overflow in the com_print_typeinfo function in PHP 5.4.3 and previous versions on Windows allows remote malicious users to execute arbitrary code via crafted arguments that trigger incorrect handling of COM object VARIANT types, as exploited in the wild in May 2012.
Php Php 5.4.2Php Php 5.4.1Php Php 5.3.2Php Php 5.2.8Php Php 5.2.6Php Php 5.1.1Php Php 5.1.0Php Php 5.3.6Php Php 5.0.0Php Php 5.2.3Php Php 5.2.1Php Php 5.3.3Php Php 5.2.7Php Php 5.2.14Php Php 4.3.10Php Php 4.2.1Php Php 4.2.0Php Php 4.3.8Php Php 4.3.9Php Php 4.4.9Php Php 4.3.0Php Php 4.0.6
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
race conditionCVE-2024-4249CVE-2024-4244CVE-2023-20198TCPCVE-2022-48648CVE-2022-48636CVE-2024-21345SQL
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook