Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

php php 4.4.8 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2008-3658
Buffer overflow in the imageloadfont function in ext/gd/gd.c in PHP 4.4.x prior to 4.4.9 and PHP 5.2 prior to 5.2.6-r6 allows context-dependent malicious users to cause a denial of service (crash) and possibly execute arbitrary code via a crafted font file.
Php Php 4.4.0Php Php 4.4.1Php Php 5.2.0Php Php 5.2.1Php Php 4.4.2Php Php 4.4.3Php Php 5.2.2Php Php 5.2.3Php Php 4.4.4Php Php 4.4.5Php Php 4.4.6Php Php 5.2.4Php Php 5.2.5Php Php 4.4.7Php Php 4.4.8Php Php 5.2.6
NA
CVE-2008-3659
Buffer overflow in the memnstr function in PHP 4.4.x prior to 4.4.9 and PHP 5.6 up to and including 5.2.6 allows context-dependent malicious users to cause a denial of service (crash) and possibly execute arbitrary code via the delimiter argument to the explode function. NOTE: th...
Php Php 4.4.0Php Php 4.4.1Php Php 4.4.8Php Php 5.2.0Php Php 4.4.2Php Php 4.4.3Php Php 5.2.1Php Php 5.2.2Php Php 5.2.3Php Php 4.4.4Php Php 4.4.5Php Php 5.2.4Php Php 5.2.5Php Php 4.4.6Php Php 4.4.7Php Php 5.2.6
NA
CVE-2008-3660
PHP 4.4.x prior to 4.4.9, and 5.x up to and including 5.2.6, when used as a FastCGI module, allows remote malicious users to cause a denial of service (crash) via a request with multiple dots preceding the extension, as demonstrated using foo..php.
Php Php 4.4.0Php Php 4.4.1Php Php 4.4.8Php Php 5.2.0Php Php 4.4.2Php Php 4.4.3Php Php 5.2.1Php Php 5.2.2Php Php 4.4.4Php Php 4.4.5Php Php 5.2.3Php Php 5.2.4Php Php 4.4.6Php Php 4.4.7Php Php 5.2.5Php Php 5.2.6
NA
CVE-2008-5557
Heap-based buffer overflow in ext/mbstring/libmbfl/filters/mbfilter_htmlent.c in the mbstring extension in PHP 4.3.0 up to and including 5.2.6 allows context-dependent malicious users to execute arbitrary code via a crafted string containing an HTML entity, which is not properly ...
Php Php 4.3.2Php Php 4.3.3Php Php 4.3.10Php Php 4.3.11Php Php 4.4.2Php Php 4.4.3Php Php 5.0.0Php Php 5.1.0Php Php 5.1.1Php Php 5.2.2Php Php 5.2.3Php Php 4.3.1Php Php 4.3.0Php Php 4.3.8Php Php 4.3.9Php Php 4.4.8Php Php 4.4.9Php Php 4.4.1Php Php 5.0.4Php Php 5.0.5Php Php 5.2.0Php Php 5.2.1
NA
CVE-2008-7068
The dba_replace function in PHP 5.2.6 and 4.x allows context-dependent malicious users to cause a denial of service (file truncation) via a key with the NULL byte. NOTE: this might only be a vulnerability in limited circumstances in which the attacker can modify or add database e...
Php Php 4.1.0Php Php 4.0.0Php Php 4.0Php Php 4.0.3Php Php 4.0.7Php Php 4.3.4Php Php 4.3.3Php Php 4.2.2Php Php 4.3.0Php Php 4.3.8Php Php 4.3.9Php Php 4.2.0Php Php 4.0.1Php Php 4.0.5Php Php 4.0.4Php Php 4.3.2Php Php 4.3.11Php Php 4.2Php Php 4.4.9Php Php 4.3.7Php Php 4.4.4Php Php 5.2.6
NA
CVE-2009-3558
The posix_mkfifo function in ext/posix/posix.c in PHP prior to 5.2.12 and 5.3.x prior to 5.3.1 allows context-dependent malicious users to bypass open_basedir restrictions, and create FIFO files, via the pathname and mode arguments, as demonstrated by creating a .htaccess file.
Php Php 2.0Php Php 2.0b10Php Php 3.0.15Php Php 3.0.16Php Php 3.0.6Php Php 3.0.7Php Php 4.0.3Php Php 4.0.4Php Php 4.0Php Php 4.1.0Php Php 4.2.2Php Php 4.2.3Php Php 4.3.2Php Php 4.3.7Php Php 5.2.5Php Php 5.2.6Php Php 3.0.10Php Php 3.0.11Php Php 3.0.2Php Php 3.0.3Php Php 4.0.0Php Php 4.0.7
NA
CVE-2009-3557
The tempnam function in ext/standard/file.c in PHP prior to 5.2.12 and 5.3.x prior to 5.3.1 allows context-dependent malicious users to bypass safe_mode restrictions, and create files in group-writable or world-writable directories, via the dir and prefix arguments.
Php Php 3.0.11Php Php 3.0.12Php Php 3.0.2Php Php 3.0.3Php Php 4.0Php Php 4.0.0Php Php 4.2.0Php Php 4.3.1Php Php 5.0.0Php Php 5.0.3Php Php 4.4.9Php Php 5.2.10Php Php 2.0Php Php 2.0b10Php Php 3.0Php Php 3.0.15Php Php 1.0Php Php 3.0.13Php Php 3.0.14Php Php 3.0.4Php Php 3.0.5Php Php 4.0.1
NA
CVE-2011-0753
Race condition in the PCNTL extension in PHP prior to 5.3.4, when a user-defined signal handler exists, might allow context-dependent malicious users to cause a denial of service (memory corruption) via a large number of concurrent signals.
Php Php 4.0.2Php Php 4.0.3Php Php 4.0Php Php 4.2.1Php Php 4.2.2Php Php 4.3.11Php Php 4.3.2Php Php 4.3.9Php Php 4.4.0Php Php 4.4.8Php Php 4.4.9Php Php 5.3.2Php Php 4.0.6Php Php 4.0.7Php Php 5.3.0Php Php 5.3.1Php Php 4.0.4Php Php 4.0.5Php Php 4.1.0Php Php 4.2.3Php Php 4.3.3Php Php 4.3.4
NA
CVE-2011-0754
The SplFileInfo::getType function in the Standard PHP Library (SPL) extension in PHP prior to 5.3.4 on Windows does not properly detect symbolic links, which might make it easier for local users to conduct symlink attacks by leveraging cross-platform differences in the stat struc...
Php Php 3.0.14Php Php 3.0.3Php Php 4.0.1Php Php 4.0.6Php Php 4.0Php Php 4.3.0Php Php 4.3.4Php Php 4.3.6Php Php 4.4.6Php Php 4.4.7Php Php 3.0.13Php Php 3.0.15Php Php 4.4.4Php Php 4.3.3Php Php 1.0Php Php 2.0Php Php 3.0.7Php Php 4.0.2Php Php 4.2.1Php Php 4.2.2Php Php 4.2.0Php Php 4.3.10
NA
CVE-2010-4409
Integer overflow in the NumberFormatter::getSymbol (aka numfmt_get_symbol) function in PHP 5.3.3 and previous versions allows context-dependent malicious users to cause a denial of service (application crash) via an invalid argument.
Php Php 4.0Php Php 4.0.0Php Php 4.2.0Php Php 4.3.1Php Php 4.3.7Php Php 4.3.8Php Php 4.4.5Php Php 4.4.6Php Php 3.0.12Php Php 3.0.1Php Php 3.0.17Php Php 3.0.16Php Php 2.0Php Php 1.0Php Php 5.3.0Php Php 4.0.3Php Php 4.0.4Php Php 4.1.0Php Php 4.2.2Php Php 4.2.3Php Php 4.3.2Php Php 4.3.3
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-48654CVE-2024-2757authentication bypassCVE-2024-3194CVE-2024-33640CVE-2024-21111dosinsecure direct object referenceCVE-2024-21345
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook