php php 5.1.2 vulnerabilities and exploits

(subscribe to this query)

Cross-site scripting (XSS) vulnerability in phpinfo (info.c) in PHP 5.1.2 and 4.4.2 allows remote malicious users to inject arbitrary web script or HTML via long array variables, including (1) a large number of dimensions or (2) long values, which prevents HTML tags from being re...

Php Php 4.4.2 Php Php 5.1.2

1 EDB exploit

PHP 4.4.2 and 5.1.2 allows local users to cause a crash (segmentation fault) by defining and executing a recursive function. NOTE: it has been reported by a reliable third party that some later versions are also affected.

Php Php 4.4.2 Php Php 5.1.2

1 EDB exploit

Integer overflow in the wordwrap function in string.c in PHP 4.4.2 and 5.1.2 might allow context-dependent malicious users to execute arbitrary code via certain long arguments that cause a small buffer to be allocated, which triggers a heap-based buffer overflow in a memcpy funct...

Php Php 4.4.2 Php Php 5.1.2

The substr_compare function in string.c in PHP 5.1.2 allows context-dependent malicious users to cause a denial of service (memory access violation) via an out-of-bounds offset argument.

The (1) file_exists and (2) imap_reopen functions in PHP prior to 5.1.5 do not check for the safe_mode and open_basedir settings, which allows local users to bypass the settings. NOTE: the error_log function is covered by CVE-2006-3011, and the imap_open function is covered by CV...

Php Php 5.1.0 Php Php 5.1.1 Php Php 5.1.2 Php Php 5.1.4

Buffer overflow in the LWZReadByte_ function in ext/gd/libgd/gd_gif_in.c in the GD extension in PHP prior to 5.1.5 allows remote malicious users to have an unknown impact via a GIF file with input_code_size greater than MAX_LWZ_BITS, which triggers an overflow when initializing t...

Php Php 5.1.0 Php Php 5.1.1 Php Php 5.1.2 Php Php 5.1.4

The stripos function in PHP prior to 5.1.5 has unknown impact and attack vectors related to an out-of-bounds read.

Php Php 5.1.0 Php Php 5.1.1 Php Php 5.1.2 Php Php 5.1.4

The array_fill function in ext/standard/array.c in PHP 4.4.2 and 5.1.2 allows context-dependent malicious users to cause a denial of service (memory consumption) via a large num value.

Php Group Php 4.4.2 Php Group Php 5.1.2

Integer overflow in memory allocation routines in PHP prior to 5.1.6, when running on a 64-bit system, allows context-dependent malicious users to bypass the memory_limit restriction.

Php Php 5.1.0 Php Php 5.1.1 Php Php 5.1.2 Php Php 5.1.4 Php Php 5.1.5

Buffer overflow in PHP prior to 5.2.0 allows remote malicious users to execute arbitrary code via crafted UTF-8 inputs to the (1) htmlentities or (2) htmlspecialchars functions.

Php Php Php Php 5.0 Php Php 5.0.0 Php Php 5.0.1 Php Php 5.0.2 Php Php 5.0.3 Php Php 5.0.4 Php Php 5.0.5 Php Php 5.1.0 Php Php 5.1.1 Php Php 5.1.2 Php Php 5.1.3

1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook