CVE-2008-5624: Undefined Security Weakness

PHP 5 before 5.2.7 does not properly initialize the pageuid and pagegid global variables for use by the SAPI phpgetuid function, which allows context-dependent attackers to bypass safemode restrictions via variable settings that are intended to be restricted to root, as demonstrated by a setting ...

FreeBSD : php -- multiple vulnerabilities (27d01223-c457-11dd-a721-0030843d3802)

Secunia reports : Some vulnerabilities have been reported in PHP, where some have an unknown impact and others can potentially be exploited by malicious people to cause a DoS Denial of Service or compromise a vulnerable system. An input validation error exists within the 'ZipArchive::extractTo'...