PT-2024-6537 · Php +10 · Php +10

Name of the Vulnerable Software and Affected Versions: PHP versions 8.1. before 8.1.30 PHP versions 8.2. before 8.2.24 PHP versions 8.3. before 8.3.12 Description: The issue is related to errors in security settings of the PHP interpreter. Exploitation of this issue may allow a remote attacker to...

Denial Of Service (DoS)

PHP is vulnerable to denial of serviceDoS attacks. An attacker could exploit a flaw in the PHAR archive handler by supplying a malicious archive file which may leads to crash the PHP interpreter or potentially disclose information due to a buffer over-read in the pharparsepharfile function in...

Denial Of Service (DoS)

php is vulnerable to denial of service DoS. The vulnerability exists in the cdfcountchain function in cdf.c, where a DoS can be caused by parsing a CDF file...

Denial Of Service (DoS)

php is vulnerable to denial of service DoS. The vulnerability exists as the cdfcheckstreamoffset function of cdf.c, where a DoS can be caused by parsing a CDF file...

Denial Of Service (DoS)

php is vulnerable to denial of service DoS. The vulnerability exists when parsing a file with indirect offset value...

USN-3953-2 php5 vulnerabilities

USN-3953-1 fixed several vulnerabilities in PHP. This update provides the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM. Original advisory details: It was discovered that PHP incorrectly handled certain exif tags in JPEG images. A remote attacker could use this issue to cause PHP...

Security Bulletin: IBM BladeCenter Advanced Management Module (AMM) is affected by vulnerability in PHP (CVE-2018-17082)

Summary IBM Advanced Management Module AMM has addressed the following vulnerability in PHP. Vulnerability Details CVEID: CVE-2018-17082 DESCRIPTION: PHP is vulnerable to cross-site scripting, caused by improper validation of user-supplied input by the Apache2 component. A remote attacker could...

The vulnerability of the IMAP component of the PHP programming language interpreter allows attackers to execute arbitrary commands on the operating system.

The vulnerability of the IMAP component of the PHP programming language interpreter is related to insufficient neutralization of special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary operating system commands...

CVE-2019-9925

S-CMS PHP v1.0 has XSS in 4.edu.php via the Sid parameter...

PHP buffer overflow vulnerability (CNVD-2019-08979)

PHP PHP: Hypertext Preprocessor, PHP: Hypertext Preprocessor is an open source general-purpose computer scripting language jointly maintained by the PHPGroup and the open source community. The language is mainly used for Web development, supports a variety of databases and operating systems. A...

Pimcore Unserialize RCE

This module exploits a PHP unserialize in Pimcore before 5.7.1 to execute arbitrary code. An authenticated user with "classes" permission could exploit the vulnerability. The vulnerability exists in the "ClassController.php" class, where the "bulk-commit" method makes it possible to exploit the...

EUVD-2019-19008

An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There is an uninitialized read in exifprocessIFDinMAKERNOTE because of mishandling the datalen variable...

XAMPP Cross-Site Scripting Vulnerability

XAMPP Apache + MySQL + PHP + PERL is a build XAMPP software station integration package. XAMPP has a cross-site scripting vulnerability. Allows an attacker to xss via the cds-fpdf.php interpret or titel parameter...

PHP has unspecified vulnerabilities (CNVD-2019-42545)

PHP PHP: Hypertext Preprocessor, PHP: Hypertext Preprocessor is an open source general-purpose computer scripting language jointly maintained by the PHPGroup and the open source community. The language is mainly used for Web development and supports a variety of databases and operating systems. A...

PHP has an unspecified vulnerability (CNVD-2019-42542)

PHP PHP: Hypertext Preprocessor, PHP: Hypertext Preprocessor is an open source general-purpose computer scripting language jointly maintained by the PHPGroup and the open source community. The language is mainly used for Web development, supports a variety of databases and operating systems. A...

Heap overflow

An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. A number of heap-based buffer over-read instances are present in mbstring regular expression functions when supplied with invalid multibyte data. These occur in...

EUVD-2019-18411

An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. xmlrpcdecode can allow a hostile XMLRPC server to cause PHP to read memory outside of allocated areas in base64decodexmlrpc in ext/xmlrpc/libxmlrpc/base64.c...

EUVD-2019-18408

An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. A heap-based buffer over-read in PHAR reading functions in the PHAR extension may allow an attacker to read allocated or unallocated memory past the actual data when trying to parse the...

Security Bulletin: Vulnerability in PHP affect IBM Chassis Management Module (CMM)

Summary IBM Chassis Management Module CMM has addressed the following vulnerability in PHP. Vulnerability Details Summary IBM Chassis Management Module CMM has addressed the following vulnerability in PHP. Vulnerability Details CVEID: CVE-2016-10397 Description: PHP could allow a remote attacker ...

Security Bulletin: IBM BladeCenter Advanced Management Module is affected by PHP vulnerability (CVE-2014-3669)

Summary Security vulnerability in PHP affects IBM BladeCenter Advanced Management Module. Vulnerability Details Summary Security vulnerability in PHP affects IBM BladeCenter Advanced Management Module. Vulnerability Details: CVE-ID: CVE-2014-3669 Description: PHP is vulnerable to a denial of...