Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

php php 5.2.16 vulnerabilities and exploits

(subscribe to this query)
5
CVSSv2
CVE-2010-4645
strtod.c, as used in the zend_strtod function in PHP 5.2 prior to 5.2.17 and 5.3 prior to 5.3.5, and other products, allows context-dependent malicious users to cause a denial of service (infinite loop) via a certain floating-point value in scientific notation, which is not prope...
Php Php 5.2.9Php Php 5.2.14Php Php 5.2.16Php Php 5.2.7Php Php 5.2.2Php Php 5.2.5Php Php 5.2.12Php Php 5.2.11Php Php 5.2.6Php Php 5.2.3Php Php 5.2.13Php Php 5.2.0Php Php 5.2.4Php Php 5.2.10Php Php 5.2.15Php Php 5.2.1Php Php 5.2.8Php Php 5.3.1Php Php 5.3.0Php Php 5.3.3Php Php 5.3.2Php Php 5.3.4
6.4
CVSSv2
CVE-2012-0057
PHP prior to 5.3.9 has improper libxslt security settings, which allows remote malicious users to create arbitrary files via a crafted XSLT stylesheet that uses the libxslt output extension.
Php Php 5.3.4Php Php 5.3.6Php Php 5.3.0Php Php 5.3.1Php Php 5.2.10Php Php 5.2.13Php Php 5.2.4Php Php 5.2.3Php Php 5.1.1Php Php 5.1.0Php Php 5.0.0Php PhpPhp Php 5.2.15Php Php 5.2.9Php Php 5.2.7Php Php 5.2.0Php Php 5.2.17Php Php 5.2.2Php Php 5.0.5Php Php 5.0.4Php Php 5.0.1Php Php 5.3.7
5
CVSSv2
CVE-2011-4885
PHP prior to 5.3.9 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote malicious users to cause a denial of service (CPU consumption) by sending many crafted parameters.
Php Php 5.2.16Php Php 5.3.4Php Php 5.2.12Php Php 5.2.11Php Php 5.2.4Php Php 5.2.3Php Php 5.1.2Php Php 5.1.1Php Php 5.0.0Php Php 5.2.15Php Php 5.3.3Php Php 5.2.10Php Php 5.2.9Php Php 5.2.2Php Php 5.2.1Php Php 5.0.5Php Php 5.0.4Php Php 5.3.6Php Php 5.3.5Php Php 5.2.17Php Php 5.3.1Php Php 5.3.0
5
CVSSv2
CVE-2012-0789
Memory leak in the timezone functionality in PHP prior to 5.3.9 allows remote malicious users to cause a denial of service (memory consumption) by triggering many strtotime function calls, which are not properly handled by the php_date_parse_tzfile cache.
Php Php 5.2.15Php Php 5.3.3Php Php 5.2.9Php Php 5.2.8Php Php 5.2.1Php Php 5.2.0Php Php 5.0.5Php Php 5.0.4Php Php 5.0.3Php Php 5.0.0Php Php 5.3.5Php Php 5.2.17Php Php 5.3.0Php Php 5.2.12Php Php 5.2.5Php Php 5.2.4Php Php 5.1.4Php Php 5.1.3Php PhpPhp Php 5.2.16Php Php 5.3.4Php Php 5.2.11
5
CVSSv2
CVE-2012-0788
The PDORow implementation in PHP prior to 5.3.9 does not properly interact with the session feature, which allows remote malicious users to cause a denial of service (application crash) via a crafted application that uses a PDO driver for a fetch and then calls the session_start ...
Php Php 5.2.15Php Php 5.3.3Php Php 5.2.14Php Php 5.2.9Php Php 5.2.8Php Php 5.2.1Php Php 5.2.0Php Php 5.3.5Php Php 5.2.17Php Php 5.3.0Php Php 5.2.12Php Php 5.2.5Php Php 5.2.4Php Php 5.1.4Php Php 5.1.3Php Php 5.0.0Php PhpPhp Php 5.0.4Php Php 5.0.3Php Php 5.3.7Php Php 5.3.6Php Php 5.3.2
5.8
CVSSv2
CVE-2012-1172
The file-upload implementation in rfc1867.c in PHP prior to 5.4.0 does not properly handle invalid [ (open square bracket) characters in name values, which makes it easier for remote malicious users to cause a denial of service (malformed $_FILES indexes) or conduct directory tra...
Php Php 5.3.3Php Php 5.3.2Php Php 5.2.5Php Php 5.2.11Php Php 5.2.0Php Php 5.3.0Php Php 5.3.1Php Php 5.3.5Php Php 5.2.6Php Php 5.2.9Php Php 5.2.17Php Php 5.2.10Php Php 5.1.1Php Php 5.1.0Php Php 5.1.6Php Php 5.0.3Php Php 5.0.0Php Php 5.2.3Php Php 5.2.4Php Php 5.2.14Php Php 5.0.2Php Php 5.3.7
7.5
CVSSv2
CVE-2012-1823
sapi/cgi/cgi_main.c in PHP prior to 5.3.12 and 5.4.x prior to 5.4.2, when configured as a CGI script (aka php-cgi), does not properly handle query strings that lack an = (equals sign) character, which allows remote malicious users to execute arbitrary code by placing command-line...
Php PhpPhp Php 5.3.10Php Php 5.3.3Php Php 5.3.2Php Php 5.3.1Php Php 5.2.12Php Php 5.2.13Php Php 5.2.4Php Php 5.2.7Php Php 5.1.6Php Php 5.1.4Php Php 5.0.0Php Php 5.3.5Php Php 5.3.4Php Php 5.3.9Php Php 5.3.8Php Php 5.3.0Php Php 5.2.5Php Php 5.2.0Php Php 5.2.3Php Php 5.2.15Php Php 5.2.16
6.8
CVSSv2
CVE-2011-4718
Session fixation vulnerability in the Sessions subsystem in PHP prior to 5.5.2 allows remote malicious users to hijack web sessions by specifying a session ID.
Php Php 5.5.0Php Php 5.2.9Php Php 5.4.12Php Php 5.3.10Php Php 5.3.27Php Php 5.1.5Php Php 5.4.15Php Php 5.3.6Php Php 5.3.9Php Php 5.1.2Php Php 5.3.1Php Php 5.1.1Php Php 5.3.18Php Php 5.2.14Php Php 5.0.0Php Php 5.1.6Php Php 5.2.16Php Php 5.3.24Php Php 5.3.15Php Php 5.3.8Php Php 5.2.7Php Php 5.2.2
5
CVSSv2
CVE-2012-1171
The libxml RSHUTDOWN function in PHP 5.x allows remote malicious users to bypass the open_basedir protection mechanism and read arbitrary files via vectors involving a stream_close method call during use of a custom stream wrapper.
Php Php 5.0.2Php Php 5.0.3Php Php 5.0.4Php Php 5.0.5Php Php 5.1.0Php Php 5.2.14Php Php 5.2.15Php Php 5.2.16Php Php 5.2.17Php Php 5.3.13Php Php 5.3.14Php Php 5.3.15Php Php 5.3.16Php Php 5.3.4Php Php 5.3.5Php Php 5.3.6Php Php 5.3.7Php Php 5.4.14Php Php 5.4.15Php Php 5.4.16Php Php 5.4.17Php Php 5.4.9
4.3
CVSSv2
CVE-2011-0421
The _zip_name_locate function in zip_name_locate.c in the Zip extension in PHP prior to 5.3.6 does not properly handle a ZIPARCHIVE::FL_UNCHANGED argument, which might allow context-dependent malicious users to cause a denial of service (NULL pointer dereference) via an empty ZIP...
Php Php 4.0.2Php Php 4.0.3Php Php 4.0Php Php 4.2.1Php Php 4.2.2Php Php 4.3.11Php Php 4.3.2Php Php 4.3.9Php Php 4.4.0Php Php 4.4.8Php Php 4.4.9Php Php 3.0.2Php Php 3.0.18Php Php 3.0.9Php Php 3.0.7Php Php 3.0.8Php Php 5.2.12Php Php 4.0.0Php Php 4.0.1Php Php 4.2.0Php Php 4.3.1Php Php 4.3.10
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-26925CVE-2023-41826LFICVE-2022-22364CVE-2024-2887command injectionremote code executionCVE-2024-34446CVE-2022-48699
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook