Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

php php 5.3.14 vulnerabilities and exploits

(subscribe to this query)
6.8
CVSSv2
CVE-2011-4718
Session fixation vulnerability in the Sessions subsystem in PHP prior to 5.5.2 allows remote malicious users to hijack web sessions by specifying a session ID.
Php Php 5.5.0Php Php 5.2.9Php Php 5.4.12Php Php 5.3.10Php Php 5.3.27Php Php 5.1.5Php Php 5.4.15Php Php 5.3.6Php Php 5.3.9Php Php 5.1.2Php Php 5.3.1Php Php 5.1.1Php Php 5.3.18Php Php 5.2.14Php Php 5.0.0Php Php 5.1.6Php Php 5.2.16Php Php 5.3.24Php Php 5.3.15Php Php 5.3.8Php Php 5.2.7Php Php 5.2.2
5
CVSSv2
CVE-2012-1171
The libxml RSHUTDOWN function in PHP 5.x allows remote malicious users to bypass the open_basedir protection mechanism and read arbitrary files via vectors involving a stream_close method call during use of a custom stream wrapper.
Php Php 5.0.2Php Php 5.0.3Php Php 5.0.4Php Php 5.0.5Php Php 5.1.0Php Php 5.2.14Php Php 5.2.15Php Php 5.2.16Php Php 5.2.17Php Php 5.3.13Php Php 5.3.14Php Php 5.3.15Php Php 5.3.16Php Php 5.3.4Php Php 5.3.5Php Php 5.3.6Php Php 5.3.7Php Php 5.4.14Php Php 5.4.15Php Php 5.4.16Php Php 5.4.17Php Php 5.4.9
5
CVSSv2
CVE-2013-2110
Heap-based buffer overflow in the php_quot_print_encode function in ext/standard/quot_print.c in PHP prior to 5.3.26 and 5.4.x prior to 5.4.16 allows remote malicious users to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted ar...
Php Php 5.3.20Php Php 5.3.12Php Php 5.3.8Php Php 5.3.5Php Php 5.3.9Php Php 5.2.12Php Php 5.2.10Php Php 5.2.6Php Php 5.2.4Php Php 5.1.1Php Php 5.1.0Php Php 5.0.0Php Php 4.3.5Php Php 4.2.1Php Php 4.4.6Php Php 4.4.7Php Php 4.4.2Php Php 4.4.3Php Php 4.0Php Php 4.0.6Php Php 4.1.0Php Php 4.0.7
5
CVSSv2
CVE-2013-4635
Integer overflow in the SdnToJewish function in jewish.c in the Calendar component in PHP prior to 5.3.26 and 5.4.x prior to 5.4.16 allows context-dependent malicious users to cause a denial of service (application hang) via a large argument to the jdtojewish function.
Php Php 5.3.20Php Php 5.3.19Php Php 5.3.8Php Php 5.3.11Php Php 5.3.5Php Php 5.3.9Php Php 5.2.12Php Php 5.2.10Php Php 5.2.13Php Php 5.2.4Php Php 5.2.3Php Php 5.1.1Php Php 5.1.0Php Php 5.0.0Php Php 4.3.10Php Php 4.3.5Php Php 4.2.1Php Php 4.4.7Php Php 4.3.0Php Php 4.4.3Php Php 4.4.4Php Php 4.0
7.5
CVSSv2
CVE-2013-1635
ext/soap/soap.c in PHP prior to 5.3.22 and 5.4.x prior to 5.4.13 does not validate the relationship between the soap.wsdl_cache_dir directive and the open_basedir directive, which allows remote malicious users to bypass intended access restrictions by triggering the creation of c...
Php Php 4.3.9Php Php 4.4.9Php Php 3.0Php PhpPhp Php 5.2.9Php Php 4.0Php Php 3.0.5Php Php 3.0.11Php Php 5.3.10Php Php 5.1.5Php Php 5.3.6Php Php 5.3.9Php Php 5.1.2Php Php 5.3.1Php Php 4.2.0Php Php 5.1.1Php Php 3.0.1Php Php 5.3.18Php Php 5.2.14Php Php 3.0.2Php Php 4.4.4Php Php 5.0.0
5
CVSSv2
CVE-2013-1643
The SOAP parser in PHP prior to 5.3.23 and 5.4.x prior to 5.4.13 allows remote malicious users to read arbitrary files via a SOAP WSDL file containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue in the ...
Php Php 4.3.9Php Php 4.4.9Php Php 3.0Php PhpPhp Php 5.2.9Php Php 4.0Php Php 3.0.5Php Php 3.0.11Php Php 5.3.10Php Php 5.1.5Php Php 5.3.6Php Php 5.3.9Php Php 5.1.2Php Php 5.3.1Php Php 4.2.0Php Php 5.1.1Php Php 3.0.1Php Php 5.3.18Php Php 5.2.14Php Php 3.0.2Php Php 4.4.4Php Php 5.0.0
2.6
CVSSv2
CVE-2012-3450
pdo_sql_parser.re in the PDO extension in PHP prior to 5.3.14 and 5.4.x prior to 5.4.4 does not properly determine the end of the query string during parsing of prepared statements, which allows remote malicious users to cause a denial of service (out-of-bounds read and applicati...
Php Php 5.3.11Php Php 5.3.4Php Php 5.3.9Php Php 5.3.2Php Php 5.3.12Php Php 5.3.8Php Php 5.3.6Php Php 5.3.5Php Php 5.4.2Php Php 5.4.3Php Php 5.3.1Php Php 5.3.7Php Php 5.4.0Php Php 5.4.1Php Php 5.3.3Php Php 5.3.0Php Php 5.3.10Php Php
5
CVSSv2
CVE-2016-7478
Zend/zend_exceptions.c in PHP, possibly 5.x prior to 5.6.28 and 7.x prior to 7.0.13, allows remote malicious users to cause a denial of service (infinite loop) via a crafted Exception object in serialized data, a related issue to CVE-2015-8876.
Php Php 5.0.0Php Php 5.0.1Php Php 5.0.2Php Php 5.1.3Php Php 5.1.4Php Php 5.2.13Php Php 5.2.14Php Php 5.2.5Php Php 5.2.6Php Php 5.3.11Php Php 5.3.12Php Php 5.3.2Php Php 5.3.20Php Php 5.3.27Php Php 5.3.28Php Php 5.3.9Php Php 5.4.0Php Php 5.4.13Php Php 5.4.14Php Php 5.4.19Php Php 5.4.2Php Php 5.4.26
7.5
CVSSv2
CVE-2012-2386
Integer overflow in the phar_parse_tarfile function in tar.c in the phar extension in PHP prior to 5.3.14 and 5.4.x prior to 5.4.4 allows remote malicious users to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted tar file that trigger...
Php Php
4.3
CVSSv2
CVE-2012-2143
The crypt_des (aka DES-based crypt) function in FreeBSD prior to 9.0-RELEASE-p2, as used in PHP, PostgreSQL, and other products, does not process the complete cleartext password if this password contains a 0x80 character, which makes it easier for context-dependent malicious user...
Postgresql PostgresqlFreebsd Freebsd 5.2.1Freebsd Freebsd 7.4Freebsd Freebsd 6.1Freebsd Freebsd 3.1Freebsd Freebsd 6.4Freebsd Freebsd 6.3Freebsd Freebsd 2.2.5Freebsd Freebsd 5.5Freebsd Freebsd 8.2Freebsd Freebsd 5.4Freebsd Freebsd 5.3Freebsd Freebsd 2.2.2Freebsd Freebsd 2.1.7Freebsd Freebsd 4.11Freebsd Freebsd 2.0.5Freebsd Freebsd 8.0Freebsd Freebsd 1.1.5.1Freebsd Freebsd 4.5Freebsd Freebsd 4.7Freebsd Freebsd 7.0Freebsd Freebsd
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionSSRFbuffer overflowCVE-2023-28952CVE-2023-41822CVE-2024-27956CVE-2023-7028CVE-2024-34447CVE-2024-34460
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook