Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

php php 4.1.2 vulnerabilities and exploits

(subscribe to this query)
NA

CVE-2002-1396

Heap-based buffer overflow in the wordwrap function in PHP after 4.1.2 and prior to 4.3.0 may allow malicious users to cause a denial of service or execute arbitrary code.
Php Php 4.2.0Php Php 4.2.2Php Php 4.2.3Php Php 4.1.2Php Php 4.2.1
NA

CVE-2002-0121

PHP 4.0 up to and including 4.1.1 stores session IDs in temporary files whose name contains the session ID, which allows local users to hijack web connections.
Php Php 4.1.0Php Php 4.0.4Php Php 4.0.5Php Php 4.0.6Php Php 4.1.2
NA

CVE-2002-0253

PHP, when not configured with the "display_errors = Off" setting in php.ini, allows remote malicious users to obtain the physical path for an include file via a trailing slash in a request to a directly accessible PHP program, which modifies the base path, causes the in...
Php Php 4.1.0Php Php 4.0.4Php Php 4.0.5Php Php 4.0Php Php 4.0.1Php Php 4.0.6Php Php 4.1.2Php Php 4.0.3
NA

CVE-2002-0986

The mail function in PHP 4.x to 4.2.2 does not filter ASCII control characters from its arguments, which could allow remote malicious users to modify mail message content, including mail headers, and possibly use PHP as a "spam proxy."
Php Php 4.2.0Php Php 4.1.0Php Php 4.0.4Php Php 4.0.5Php Php 4.2.2Php Php 4.0.3Php Php 4.0.7Php Php 4.0.2Php Php 4.1.1Php Php 4.0.1Php Php 4.0Php Php 4.0.6Php Php 4.1.2Php Php 3.0.18Php Php 4.2.1
NA

CVE-2002-1783

CRLF injection vulnerability in PHP 4.2.1 up to and including 4.2.3, when allow_url_fopen is enabled, allows remote malicious users to modify HTTP headers for outgoing requests by causing CRLF sequences to be injected into arguments that are passed to the (1) fopen or (2) file fu...
Php Php 4.2.0Php Php 4.1.0Php Php 4.0.4Php Php 4.0.5Php Php 4.2.2Php Php 3.0.17Php Php 4.0.7Php Php 4.1.1Php Php 3.0.15Php Php 3.0.16Php Php 4.2.3Php Php 4.0.6Php Php 4.1.2Php Php 3.0.18Php Php 4.2.1Php Php 4.0.3Php Php 3.0.14
NA

CVE-2003-0166

Integer signedness error in emalloc() function for PHP prior to 4.3.2 allow remote malicious users to cause a denial of service (memory consumption) and possibly execute arbitrary code via negative arguments to functions such as (1) socket_recv, (2) socket_recvfrom, and possibly ...
Php Php 4.2.0Php Php 4.1.0Php Php 4.0.4Php Php 4.3.0Php Php 4.0.5Php Php 4.2.2Php Php 4.0.7Php Php 4.0.2Php Php 4.1.1Php Php 4.2.3Php Php 4.0Php Php 4.0.6Php Php 4.1.2Php Php 4.3.1Php Php 4.2.1Php Php 4.0.1Php Php 4.0.3
NA

CVE-2003-0860

Buffer overflows in PHP prior to 4.3.3 have unknown impact and unknown attack vectors.
Php Php 4.2.0Php Php 4.1.0Php Php 4.0.4Php Php 4.3.0Php Php 4.0.5Php Php 4.0.7Php Php 4.2.2Php Php 4.3.2Php Php 4.0.3Php Php 4.0.2Php Php 4.1.1Php Php 4.2.3Php Php 4.0.1Php Php 4.0Php Php 4.0.6Php Php 4.1.2Php Php 4.3.1Php Php 4.2.1Php Php 4.2
NA

CVE-2003-0861

Integer overflows in (1) base64_encode and (2) the GD library for PHP prior to 4.3.3 have unknown impact and unknown attack vectors.
Php Php 4.2.0Php Php 4.1.0Php Php 4.0.4Php Php 4.3.0Php Php 4.0.5Php Php 4.0.7Php Php 4.2.2Php Php 4.3.2Php Php 4.0.3Php Php 4.0.2Php Php 4.1.1Php Php 4.2.3Php Php 4.0.1Php Php 4.0Php Php 4.0.6Php Php 4.1.2Php Php 4.3.1Php Php 4.2.1Php Php 4.2
NA

CVE-2002-0229

Safe Mode feature (safe_mode) in PHP 3.0 up to and including 4.1.0 allows attackers with access to the MySQL database to bypass Safe Mode access restrictions and read arbitrary files using "LOAD DATA INFILE LOCAL" SQL statements.
Php Php 3.0Php Php 3.0.5Php Php 3.0.11Php Php 3.0.1Php Php 3.0.2Php Php 4.1.0Php Php 4.0.4Php Php 4.0.5Php Php 3.0.8Php Php 3.0.13Php Php 3.0.7Php Php 3.0.6Php Php 3.0.16Php Php 3.0.10Php Php 3.0.4Php Php 4.0Php Php 4.0.1Php Php 4.0.6Php Php 4.1.2Php Php 3.0.12Php Php 4.0.3Php Php 3.0.9
NA

CVE-2007-2727

The mcrypt_create_iv function in ext/mcrypt/mcrypt.c in PHP prior to 4.4.7, 5.2.1, and possibly 5.0.x and other PHP 5 versions, calls php_rand_r with an uninitialized seed variable and therefore always generates the same initialization vector (IV), which might allow context-depen...
Php Php 4.3.9Php Php 4.2.0Php Php 4.1.0Php Php 4.3.4Php Php 4.0.4Php Php 4.3.0Php Php 4.0.5Php Php 4.3.6Php Php 4.0.7Php Php 4.3.7Php Php 4.2.2Php Php 4.3.2Php Php 4.3.11Php Php 4.0.3Php Php 4.0.2Php Php 4.3.3Php Php 4.1.1Php Php 4.2.3Php Php 4.0.1Php Php 4.0.6Php Php 4.1.2Php Php 4.3.1
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
appleLFIiphone osCVE-2024-9484CVE-2023-4069SQL injectionlogic flawCVE-2024-47651CVE-2024-45519CVE-2024-9071CVE-2024-9349
Home
/
Search Results
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook