Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

php php 5.2.14 vulnerabilities and exploits

(subscribe to this query)
5
CVSSv2
CVE-2010-4150
Double free vulnerability in the imap_do_open function in the IMAP extension (ext/imap/php_imap.c) in PHP 5.2 prior to 5.2.15 and 5.3 prior to 5.3.4 allows malicious users to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors.
Php Php 5.2.4Php Php 5.2.3Php Php 5.3.2Php Php 5.2.11Php Php 5.2.0Php Php 5.3.0Php Php 5.3.1Php Php 5.2.12Php Php 5.2.10Php Php 5.2.13Php Php 5.2.2Php Php 5.3.3Php Php 5.2.14Php Php 5.2.1
5
CVSSv2
CVE-2010-4698
Stack-based buffer overflow in the GD extension in PHP prior to 5.2.15 and 5.3.x prior to 5.3.4 allows context-dependent malicious users to cause a denial of service (application crash) via a large number of anti-aliasing steps in an argument to the imagepstext function.
Php Php 5.2.12Php Php 5.2.10Php Php 5.2.1Php Php 5.2.2Php Php 5.2.0Php Php 5.2.4Php Php 5.3.1Php Php 5.3.2Php Php 5.2.3Php Php 5.2.14Php Php 5.2.13Php Php 5.2.11Php Php 5.3.3Php Php 5.3.0
4.3
CVSSv2
CVE-2010-3710
Stack consumption vulnerability in the filter_var function in PHP 5.2.x up to and including 5.2.14 and 5.3.x up to and including 5.3.3, when FILTER_VALIDATE_EMAIL mode is used, allows remote malicious users to cause a denial of service (memory consumption and application crash) v...
Php Php 5.2.5Php Php 5.2.0Php Php 5.2.1Php Php 5.2.2Php Php 5.2.13Php Php 5.2.11Php Php 5.2.3Php Php 5.2.14Php Php 5.2.12Php Php 5.2.10Php Php 5.2.6Php Php 5.2.8Php Php 5.3.1Php Php 5.3.2Php Php 5.2.9Php Php 5.2.7Php Php 5.2.4Php Php 5.3.3Php Php 5.3.0
5
CVSSv2
CVE-2010-4645
strtod.c, as used in the zend_strtod function in PHP 5.2 prior to 5.2.17 and 5.3 prior to 5.3.5, and other products, allows context-dependent malicious users to cause a denial of service (infinite loop) via a certain floating-point value in scientific notation, which is not prope...
Php Php 5.2.9Php Php 5.2.14Php Php 5.2.16Php Php 5.2.7Php Php 5.2.2Php Php 5.2.5Php Php 5.2.12Php Php 5.2.11Php Php 5.2.6Php Php 5.2.3Php Php 5.2.13Php Php 5.2.0Php Php 5.2.4Php Php 5.2.10Php Php 5.2.15Php Php 5.2.1Php Php 5.2.8Php Php 5.3.1Php Php 5.3.0Php Php 5.3.3Php Php 5.3.2Php Php 5.3.4
6.4
CVSSv2
CVE-2012-0057
PHP prior to 5.3.9 has improper libxslt security settings, which allows remote malicious users to create arbitrary files via a crafted XSLT stylesheet that uses the libxslt output extension.
Php Php 5.3.4Php Php 5.3.6Php Php 5.3.0Php Php 5.3.1Php Php 5.2.10Php Php 5.2.13Php Php 5.2.4Php Php 5.2.3Php Php 5.1.1Php Php 5.1.0Php Php 5.0.0Php PhpPhp Php 5.2.15Php Php 5.2.9Php Php 5.2.7Php Php 5.2.0Php Php 5.2.17Php Php 5.2.2Php Php 5.0.5Php Php 5.0.4Php Php 5.0.1Php Php 5.3.7
5
CVSSv2
CVE-2011-4885
PHP prior to 5.3.9 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote malicious users to cause a denial of service (CPU consumption) by sending many crafted parameters.
Php Php 5.2.16Php Php 5.3.4Php Php 5.2.12Php Php 5.2.11Php Php 5.2.4Php Php 5.2.3Php Php 5.1.2Php Php 5.1.1Php Php 5.0.0Php Php 5.2.15Php Php 5.3.3Php Php 5.2.10Php Php 5.2.9Php Php 5.2.2Php Php 5.2.1Php Php 5.0.5Php Php 5.0.4Php Php 5.3.6Php Php 5.3.5Php Php 5.2.17Php Php 5.3.1Php Php 5.3.0
5
CVSSv2
CVE-2012-0789
Memory leak in the timezone functionality in PHP prior to 5.3.9 allows remote malicious users to cause a denial of service (memory consumption) by triggering many strtotime function calls, which are not properly handled by the php_date_parse_tzfile cache.
Php Php 5.2.15Php Php 5.3.3Php Php 5.2.9Php Php 5.2.8Php Php 5.2.1Php Php 5.2.0Php Php 5.0.5Php Php 5.0.4Php Php 5.0.3Php Php 5.0.0Php Php 5.3.5Php Php 5.2.17Php Php 5.3.0Php Php 5.2.12Php Php 5.2.5Php Php 5.2.4Php Php 5.1.4Php Php 5.1.3Php PhpPhp Php 5.2.16Php Php 5.3.4Php Php 5.2.11
5
CVSSv2
CVE-2012-0788
The PDORow implementation in PHP prior to 5.3.9 does not properly interact with the session feature, which allows remote malicious users to cause a denial of service (application crash) via a crafted application that uses a PDO driver for a fetch and then calls the session_start ...
Php Php 5.2.15Php Php 5.3.3Php Php 5.2.14Php Php 5.2.9Php Php 5.2.8Php Php 5.2.1Php Php 5.2.0Php Php 5.3.5Php Php 5.2.17Php Php 5.3.0Php Php 5.2.12Php Php 5.2.5Php Php 5.2.4Php Php 5.1.4Php Php 5.1.3Php Php 5.0.0Php PhpPhp Php 5.0.4Php Php 5.0.3Php Php 5.3.7Php Php 5.3.6Php Php 5.3.2
5.8
CVSSv2
CVE-2012-1172
The file-upload implementation in rfc1867.c in PHP prior to 5.4.0 does not properly handle invalid [ (open square bracket) characters in name values, which makes it easier for remote malicious users to cause a denial of service (malformed $_FILES indexes) or conduct directory tra...
Php Php 5.3.3Php Php 5.3.2Php Php 5.2.5Php Php 5.2.11Php Php 5.2.0Php Php 5.3.0Php Php 5.3.1Php Php 5.3.5Php Php 5.2.6Php Php 5.2.9Php Php 5.2.17Php Php 5.2.10Php Php 5.1.1Php Php 5.1.0Php Php 5.1.6Php Php 5.0.3Php Php 5.0.0Php Php 5.2.3Php Php 5.2.4Php Php 5.2.14Php Php 5.0.2Php Php 5.3.7
7.5
CVSSv2
CVE-2012-1823
sapi/cgi/cgi_main.c in PHP prior to 5.3.12 and 5.4.x prior to 5.4.2, when configured as a CGI script (aka php-cgi), does not properly handle query strings that lack an = (equals sign) character, which allows remote malicious users to execute arbitrary code by placing command-line...
Php PhpPhp Php 5.3.10Php Php 5.3.3Php Php 5.3.2Php Php 5.3.1Php Php 5.2.12Php Php 5.2.13Php Php 5.2.4Php Php 5.2.7Php Php 5.1.6Php Php 5.1.4Php Php 5.0.0Php Php 5.3.5Php Php 5.3.4Php Php 5.3.9Php Php 5.3.8Php Php 5.3.0Php Php 5.2.5Php Php 5.2.0Php Php 5.2.3Php Php 5.2.15Php Php 5.2.16
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-48654CVE-2024-2757authentication bypassCVE-2024-3194CVE-2024-33640CVE-2024-21111dosinsecure direct object referenceCVE-2024-21345
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook