Php Security Vulnerabilities

CVE-2000-0860

The file upload capability in PHP versions 3 and 4 allows remote attackers to read arbitrary files by setting hidden form fields whose names match the names of internal PHP script...

CVE-2000-0745

admin.php3 in PHP-Nuke does not properly verify the PHP-Nuke administrator password, which allows remote attackers to gain privileges by requesting a URL that does not specify the aid or pwd...

CVE-2000-0059

PHP3 with safe_mode enabled does not properly filter shell metacharacters from commands that are executed by popen, which could allow remote attackers to execute...

CVE-1999-0068

CGI PHP mylog script allows an attacker to read any file on the target...

CVE-1999-0238

php.cgi allows attackers to read any file on the...

CVE-1999-0058

Buffer overflow in PHP cgi program, php.cgi allows shell...