Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2015-4598
HistoryMay 16, 2016 - 10:59 a.m.

CVE-2015-4598

2016-05-1610:59:00
CWE-20
[email protected]
web.nvd.nist.gov
99
cve-2015-4598
php
remote attackers
read
write
arbitrary files
security vulnerability
nvd

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

7.7 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.007 Low

EPSS

Percentile

79.4%

JSON

PHP before 5.4.42, 5.5.x before 5.5.26, and 5.6.x before 5.6.10 does not ensure that pathnames lack %00 sequences, which might allow remote attackers to read or write to arbitrary files via crafted input to an application that calls (1) a DOMDocument save method or (2) the GD imagepsloadfont function, as demonstrated by a filename\0.html attack that bypasses an intended configuration in which client users may write to only .html files.

Related

prion 1
nessus 25
f5 2
ubuntucve 1
openvas 22
mageia 1
securityvulns 3
debian 3
redhat 5
osv 2
oraclelinux 4
suse 5
ibm 5
veracode 7
ubuntu 1
centos 2
cloudlinux 1
rosalinux 1
prion
prion
Design/Logic Flaw
2016-05-16 10:59:00
nessus
nessus
F5 Networks BIG-IP : PHP vulnerability (K17049)
2016-10-10 00:00:00
Debian DSA-3344-1 : php5 - security update
2015-08-28 00:00:00
PHP 5.6.x < 5.6.10 Multiple Vulnerabilities
2019-01-09 00:00:00
f5
f5
K17049 : PHP vulnerability CVE-2015-4598
2015-08-07 00:00:00
SOL17049 - PHP vulnerability CVE-2015-4598
2015-08-07 00:00:00
ubuntucve
ubuntucve
CVE-2015-4598
2015-06-17 00:00:00
openvas
openvas
PHP Multiple Vulnerabilities - 05 (Aug 2016) - Linux
2016-08-31 00:00:00
Mageia: Security Advisory (MGASA-2015-0258)
2022-01-28 00:00:00
PHP Multiple Vulnerabilities - 05 (Aug 2016) - Windows
2016-08-31 00:00:00
mageia
mageia
Updated php package fixes security vulnerability
2015-07-05 20:22:03
securityvulns
securityvulns
[SECURITY] [DSA 3344-1] php5 security update
2015-08-31 00:00:00
[USN-2658-1] PHP vulnerabilities
2015-07-13 00:00:00
PHP multiple security vulnerabilities
2015-07-13 00:00:00
debian
debian
[SECURITY] [DSA 3344-1] php5 security update
2015-08-27 15:00:09
[SECURITY] [DSA 3344-1] php5 security update
2015-08-27 15:00:09
[SECURITY] [DLA 307-1] php5 security update
2015-09-07 20:21:46
redhat
redhat
(RHSA-2015:1219) Moderate: php54-php security update
2015-07-09 00:00:00
(RHSA-2015:1187) Important: rh-php56-php security update
2015-06-25 00:00:00
(RHSA-2015:1186) Important: php55-php security update
2015-06-25 00:00:00
osv
osv
php5 - security update
2015-08-27 00:00:00
php5 - security update
2015-09-07 00:00:00
oraclelinux
oraclelinux
php54-php security update
2016-02-04 00:00:00
php55-php security update
2016-02-04 00:00:00
php security update
2015-07-09 00:00:00
suse
suse
Security update for PHP (important)
2015-07-17 20:09:41
Security update for php5 (important)
2015-07-06 10:05:40
Security update for php5 (important)
2015-07-17 11:08:12
ibm
ibm
Security Bulletin: IBM Tealeaf Customer Experience PCA Web UI PHP security issues
2018-06-16 19:50:01
Security Bulletin: Multiple vulnerabilities in php affect IBM Flex System Manger (FSM)
2019-01-31 02:10:01
Security Bulletin: IBM BladeCenter Advanced Management Module (AMM) is affected by multiple vulnerabilities in GNU C Library (glibc), krb5 and php
2020-11-02 20:22:51
veracode
veracode
Arbitrary File Write
2019-05-02 05:39:55
Improper Input Validation
2019-05-02 05:39:56
Heap-based Buffer Overflow
2019-05-02 05:39:55
ubuntu
ubuntu
PHP vulnerabilities
2015-07-06 00:00:00
centos
centos
php security update
2015-07-09 19:23:41
php security update
2015-06-24 03:28:02
cloudlinux
cloudlinux
Fix of 227 CVE
2020-10-15 12:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2021-1950
2021-07-02 17:57:45

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

7.7 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.007 Low

EPSS

Percentile

79.4%

JSON
Related for CVE-2015-4598
prion1nessus25f52ubuntucve1openvas22mageia1securityvulns3debian3redhat5osv2oraclelinux4suse5ibm5veracode7ubuntu1centos2cloudlinux1rosalinux1