Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

php php vulnerabilities and exploits

(subscribe to this query)
NA

CVE-2013-4635

Integer overflow in the SdnToJewish function in jewish.c in the Calendar component in PHP prior to 5.3.26 and 5.4.x prior to 5.4.16 allows context-dependent malicious users to cause a denial of service (application hang) via a large argument to the jdtojewish function.
Php Php 4.3.9Php Php 4.4.9Php Php 3.0Php Php 5.2.9Php Php 4.0Php Php 3.0.5Php Php 3.0.11Php Php 5.3.10Php Php 5.1.5Php Php 5.3.6Php Php 5.3.9Php Php 5.1.2Php Php 5.3.1Php Php 4.2.0Php Php 5.1.1Php Php 3.0.1Php Php 5.3.18Php Php 5.2.14Php Php 3.0.2Php Php 4.4.4Php Php 5.0.0Php Php 4.1.0
NA

CVE-2013-2110

Heap-based buffer overflow in the php_quot_print_encode function in ext/standard/quot_print.c in PHP prior to 5.3.26 and 5.4.x prior to 5.4.16 allows remote malicious users to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted ar...
Php Php 4.3.9Php Php 4.4.9Php Php 3.0Php Php 5.2.9Php Php 4.0Php Php 3.0.5Php Php 3.0.11Php Php 5.3.10Php Php 5.1.5Php Php 5.3.6Php Php 5.3.9Php Php 5.1.2Php Php 5.3.1Php Php 4.2.0Php Php 5.1.1Php Php 3.0.1Php Php 5.3.18Php Php 5.2.14Php Php 3.0.2Php Php 4.4.4Php Php 5.0.0Php Php 4.1.0
NA

CVE-2012-2688

Unspecified vulnerability in the _php_stream_scandir function in the stream implementation in PHP prior to 5.3.15 and 5.4.x prior to 5.4.5 has unknown impact and remote attack vectors, related to an "overflow."
Php Php 4.3.9Php Php 4.4.9Php Php 3.0Php Php 5.2.9Php Php 4.0Php Php 3.0.5Php Php 3.0.11Php Php 5.3.10Php Php 5.1.5Php Php 5.3.6Php Php 5.3.9Php Php 5.1.2Php Php 5.3.1Php Php 4.2.0Php Php 5.1.1Php Php 3.0.1Php Php 5.2.14Php Php 3.0.2Php Php 4.4.4Php Php 5.0.0Php Php 4.1.0Php Php 5.1.6
NA

CVE-2007-1461

The compress.bzip2:// URL wrapper provided by the bz2 extension in PHP prior to 4.4.7, and 5.x prior to 5.2.2, does not implement safemode or open_basedir checks, which allows remote malicious users to read bzip2 archives located outside of the intended directories.
Php Php 5.1.5Php Php 5.1.2Php Php 5.1.1Php Php 5.1.6Php Php 5.0.5Php Php 5.0.1Php Php 5.1.4Php Php 5.0.4Php Php 5.0.3Php Php 5.1.0Php Php 5.2.0Php Php 5.1.3Php Php 5.0.2Php Php 5.2.1Php Php 5.0.0Php Php 4.3.9Php Php 3.0Php Php 4.0Php Php 3.0.5Php Php 3.0.11Php Php 4.2.0Php Php 3.0.1
NA

CVE-2009-4143

PHP prior to 5.2.12 does not properly handle session data, which has unspecified impact and attack vectors related to (1) interrupt corruption of the SESSION superglobal array and (2) the session.save_path directive.
Php Php 4.3.9Php Php 4.4.9Php Php 3.0Php Php 5.2.9Php Php 4.0Php Php 3.0.5Php Php 3.0.11Php Php 5.1.5Php Php 5.1.2Php Php 4.2.0Php Php 5.1.1Php Php 3.0.1Php Php 3.0.2Php Php 4.4.4Php Php 5.0.0Php Php 4.1.0Php Php 5.1.6Php Php 4.3.4Php Php 4.0.4Php Php 4.3.0Php Php 4.0.5Php Php 5.0
NA

CVE-2009-3291

The php_openssl_apply_verification_policy function in PHP prior to 5.2.11 does not properly perform certificate validation, which has unknown impact and attack vectors, probably related to an ability to spoof certificates.
Php Php 4.3.9Php Php 4.4.9Php Php 3.0Php Php 5.2.9Php Php 4.0Php Php 3.0.5Php Php 3.0.11Php Php 5.1.5Php Php 5.1.2Php Php 4.2.0Php Php 5.1.1Php Php 3.0.1Php Php 3.0.2Php Php 4.4.4Php Php 5.0.0Php Php 4.1.0Php Php 5.1.6Php Php 4.3.4Php Php 4.0.4Php Php 4.3.0Php Php 4.0.5Php Php 5.0
NA

CVE-2011-0752

The extract function in PHP prior to 5.2.15 does not prevent use of the EXTR_OVERWRITE parameter to overwrite (1) the GLOBALS superglobal array and (2) the this variable, which allows context-dependent malicious users to bypass intended access restrictions by modifying data struc...
Php Php 4.3.9Php Php 4.4.9Php Php 3.0Php Php 5.2.9Php Php 4.0Php Php 3.0.5Php Php 3.0.11Php Php 5.1.5Php Php 5.1.2Php Php 4.2.0Php Php 5.1.1Php Php 3.0.1Php Php 3.0.2Php Php 4.4.4Php Php 5.0.0Php Php 4.1.0Php Php 5.1.6Php Php 4.3.4Php Php 4.0.4Php Php 4.3.0Php Php 4.0.5Php Php 5.2.7
NA

CVE-2007-4652

The session extension in PHP prior to 5.2.4 might allow local users to bypass open_basedir restrictions via a session file that is a symlink.
Php Php 4.3.9Php Php 4.4.9Php Php 3.0Php Php 4.0Php Php 3.0.5Php Php 3.0.11Php Php 5.1.5Php Php 5.1.2Php Php 4.2.0Php Php 5.1.1Php Php 3.0.1Php Php 3.0.2Php Php 4.4.4Php Php 5.0.0Php Php 4.1.0Php Php 5.1.6Php Php 4.3.4Php Php 4.0.4Php Php 4.3.0Php Php 4.0.5Php Php 5.2.2Php Php 3.0.8
NA

CVE-2006-3011

The error_log function in basic_functions.c in PHP prior to 4.4.4 and 5.x prior to 5.1.5 allows local users to bypass safe mode and open_basedir restrictions via a "php://" or other scheme in the third argument, which disables safe mode.
Php Php 4.3.9Php Php 3.0Php Php 4.0Php Php 3.0.5Php Php 3.0.11Php Php 4.2.0Php Php 3.0.1Php Php 3.0.2Php Php 4.1.0Php Php 4.3.4Php Php 4.0.4Php Php 4.3.0Php Php 4.0.5Php Php 3.0.8Php Php 4.3.6Php Php 3.0.13Php Php 4.3.7Php Php 4.2.2Php Php 4.4.2Php Php 3.0.7Php Php 4.3.2Php Php 4.3.11
NA

CVE-2011-1153

Multiple format string vulnerabilities in phar_object.c in the phar extension in PHP 5.3.5 and previous versions allow context-dependent malicious users to obtain sensitive information from process memory, cause a denial of service (memory corruption), or possibly execute arbitra...
Php Php 4.3.9Php Php 4.4.9Php Php 3.0Php Php 5.2.9Php Php 4.0Php Php 3.0.5Php Php 3.0.11Php Php 5.1.5Php Php 5.1.2Php Php 5.3.1Php Php 4.2.0Php Php 5.1.1Php Php 3.0.1Php Php 5.2.14Php Php 3.0.2Php Php 4.4.4Php Php 5.0.0Php Php 4.1.0Php Php 5.1.6Php Php 4.3.4Php Php 4.0.4Php Php 4.3.0
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-20017administrator privilegesCVE-2024-36401CVE-2024-8521CVE-2024-8247event management systemCVE-2024-45098aspera faspexremote attackersXSSmindsdbangeljudesuarezCVE-2024-45157
Home
/
Search Results
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook