Filter
AND
AND

PHP PHPphp.exe in PHP 3.0 through 4.2.2, when running on Apache, does not terminate properly, which allows …

7.8
First published (updated )

PHP PHPThe imap_header function in the IMAP functionality for PHP before 4.3.0 allows remote attackers to c…

First published (updated )

PHP PHPCRLF Injection

First published (updated )

PHP PHPBuffer Overflow

7.5
First published (updated )

PHP PHPArgument injection vulnerability in the mail function for PHP 4.x to 4.2.2 may allow attackers to by…

7.5
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

PHP PHPThe mail function in PHP 4.x to 4.2.2 does not filter ASCII control characters from its arguments, w…

First published (updated )

PHP PHPmove_uploaded_file in PHP does not does not check for the base directory (open_basedir), which could…

First published (updated )

PHP PHPPHP, when not configured with the "display_errors = Off" setting in php.ini, allows remote attackers…

First published (updated )

PHP PHPSafe Mode feature (safe_mode) in PHP 3.0 through 4.1.0 allows attackers with access to the MySQL dat…

7.5
First published (updated )

PHP PHPPHP 4.0 through 4.1.1 stores session IDs in temporary files whose name contains the session ID, whic…

2.1
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

PHP PHPBuffer Overflow

First published (updated )

PHP PHPInteger Overflow

First published (updated )

PHP PHPInteger signedness error in emalloc() function for PHP before 4.3.2 allow remote attackers to cause …

7.5
First published (updated )

PHP PHPInput Validation

First published (updated )

PHP PHPBuffer Overflow

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

PHP PHPThe memory_limit functionality in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, under certain conditi…

First published (updated )

PHP PHPXSS

First published (updated )

PHP PHPCRLF Injection

First published (updated )

PHP PHPThe exif_read_data function in the Exif module in PHP before 4.4.1 allows remote attackers to cause …

First published (updated )

PHP PHPThe apache2handler SAPI (sapi_apache2.c) in the Apache module (mod_php) for PHP 5.x before 5.1.0 fin…

2.1
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

PHP PHPThe RFC1867 file upload feature in PHP 4.x up to 4.4.0 and 5.x up to 5.0.5, when register_globals is…

7.5
First published (updated )

PHP PHPUnspecified vulnerability in PHP before 4.4.1, when using the virtual function on Apache 2, allows r…

7.5
First published (updated )

PHP PHPMultiple vulnerabilities in PHP before 4.4.1 allow remote attackers to bypass safe_mode and open_bas…

7.5
First published (updated )

PHP PHPThe parse_str function in PHP 4.x up to 4.4.0 and 5.x up to 5.0.5, when called with only one paramet…

First published (updated )

PHP PHPXSS

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

PHP PHPRace Condition

First published (updated )

PHP PHPCode Injection, Integer Overflow

First published (updated )

PHP PHPPHP 4.x up to 4.4.4 and PHP 5 up to 5.1.6 allows local users to bypass certain Apache HTTP Server ht…

3.6
First published (updated )

PHP PHPPHP before 4.4.3 and 5.x before 5.1.4 does not limit the character set of the session identifier (PH…

7.5
First published (updated )

PHP PHPscanf.c in PHP 5.1.4 and earlier, and 4.4.3 and earlier, allows context-dependent attackers to execu…

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203