Lucene search

K

PHP Security Vulnerabilities

cve
cve

CVE-2007-3332

Directory traversal vulnerability in Satellite.php in Satel Lite for PhpNuke allows remote attackers to read arbitrary files via a .. (dot dot) sequence in the name parameter in a modload...

6.7AI Score

0.017EPSS

2007-06-21 07:30 PM
23
cve
cve

CVE-2007-3294

Multiple buffer overflows in libtidy, as used in the Tidy extension for PHP 5.2.3 and possibly other products, allow context-dependent attackers to execute arbitrary code via (1) a long second argument to the tidy_parse_string function or (2) an unspecified vector to the tidy_repair_string...

7.7AI Score

0.007EPSS

2007-06-20 09:30 PM
30
cve
cve

CVE-2007-3281

Cross-site scripting (XSS) vulnerability in index.php in Php Hosting Biller 1.0 allows remote attackers to inject arbitrary web script or HTML via the...

5.7AI Score

0.011EPSS

2007-06-19 09:30 PM
23
cve
cve

CVE-2007-3217

Multiple PHP remote file inclusion vulnerabilities in Prototype of an PHP application 0.1 allow remote attackers to execute arbitrary PHP code via a URL in the path_inc parameter to (1) index.php in gestion/; (2) identification.php, (3) disconnect.php, (4) loginliste.php, (5) loginmodif.php, (6)...

7.7AI Score

0.179EPSS

2007-06-14 10:30 PM
24
2
cve
cve

CVE-2007-3218

Cross-site scripting (XSS) vulnerability in request.php in PHP Live! 3.2.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the pagex...

5.8AI Score

0.003EPSS

2007-06-14 10:30 PM
16
cve
cve

CVE-2007-3205

The parse_str function in (1) PHP, (2) Hardened-PHP, and (3) Suhosin, when called without a second parameter, might allow remote attackers to overwrite arbitrary variables by specifying variable names and values in the string to be parsed. NOTE: it is not clear whether this is a design limitation.....

6.7AI Score

0.065EPSS

2007-06-13 10:30 AM
373
cve
cve

CVE-2007-3160

PHP remote file inclusion vulnerability in admin/header.php in PHP Real Estate Classifieds Premium Plus allows remote attackers to execute arbitrary PHP code via a URL in the loc...

7.5AI Score

0.153EPSS

2007-06-11 10:30 PM
19
cve
cve

CVE-2007-3002

PHP JackKnife (PHPJK) allows remote attackers to obtain sensitive information via (1) a request to index.php with an invalid value of the iParentUnq[] parameter, or a request to G_Display.php with an invalid (2) iCategoryUnq[] or (3) sSort[] array parameter, which reveals the path in various error....

6.3AI Score

0.007EPSS

2007-06-04 05:30 PM
18
4
cve
cve

CVE-2007-3001

Multiple cross-site scripting (XSS) vulnerabilities in PHP JackKnife (PHPJK) allow remote attackers to inject arbitrary web script or HTML via (1) the sUName parameter to UserArea/Authenticate.php, (2) the sAccountUnq parameter to UserArea/NewAccounts/index.php, or the (3) iCategoryUnq, (4)...

5.7AI Score

0.011EPSS

2007-06-04 05:30 PM
18
cve
cve

CVE-2007-3000

Multiple SQL injection vulnerabilities in PHP JackKnife (PHPJK) allow remote attackers to execute arbitrary SQL commands via (1) the iCategoryUnq parameter to G_Display.php or (2) the iSearchID parameter to...

8.6AI Score

0.008EPSS

2007-06-04 05:30 PM
19
cve
cve

CVE-2007-3007

PHP 5 before 5.2.3 does not enforce the open_basedir or safe_mode restriction in certain cases, which allows context-dependent attackers to determine the existence of arbitrary files by checking if the readfile function returns a string. NOTE: this issue might also involve the realpath...

7.4AI Score

0.011EPSS

2007-06-04 05:30 PM
40
2
cve
cve

CVE-2007-2939

Multiple PHP remote file inclusion vulnerabilities in Mazen's PHP Chat 3.0.0 allow remote attackers to execute arbitrary PHP code via a URL in the basepath parameter to (1) ITX.php, (2) IT_Error.php, or (3) IT.php in...

7.6AI Score

0.131EPSS

2007-05-31 12:30 AM
25
cve
cve

CVE-2007-2844

PHP 4.x and 5.x before 5.2.1, when running on multi-threaded systems, does not ensure thread safety for libc crypt function calls using protection schemes such as a mutex, which creates race conditions that allow remote attackers to overwrite internal program memory and gain system...

7AI Score

0.03EPSS

2007-05-24 06:30 PM
40
cve
cve

CVE-2007-0448

The fopen function in PHP 5.2.0 does not properly handle invalid URI handlers, which allows context-dependent attackers to bypass safe_mode restrictions and read arbitrary files via a file path specified with an invalid URI, as demonstrated via the srpath...

6.4AI Score

0.011EPSS

2007-05-24 06:30 PM
37
cve
cve

CVE-2007-2519

Directory traversal vulnerability in the installer in PEAR 1.0 through 1.5.3 allows user-assisted remote attackers to overwrite arbitrary files via a .. (dot dot) sequence in the (1) install-as attribute in the file element in package.xml 1.0 or the (2) as attribute in the install element in...

6.5AI Score

0.06EPSS

2007-05-22 07:30 PM
30
cve
cve

CVE-2007-2748

The substr_count function in PHP 5.2.1 and earlier allows context-dependent attackers to obtain sensitive information via unspecified vectors, a different affected function than...

7.2AI Score

0.023EPSS

2007-05-17 08:30 PM
32
cve
cve

CVE-2007-2728

The soap extension in PHP calls php_rand_r with an uninitialized seed variable, which has unknown impact and attack vectors, a related issue to the mcrypt_create_iv issue covered by...

6.3AI Score

0.027EPSS

2007-05-16 10:30 PM
34
cve
cve

CVE-2007-2665

PHP remote file inclusion vulnerability in block.php in PhpFirstPost 0.1 allows remote attackers to execute arbitrary PHP code via a URL in the Include...

7.5AI Score

0.011EPSS

2007-05-14 11:19 PM
22
cve
cve

CVE-2007-2632

Multiple cross-site scripting (XSS) vulnerabilities in PHP Multi User Randomizer (phpMUR) 2006.09.13 allow remote attackers to inject arbitrary web script or HTML via (1) the edit_plugin parameter to configure_plugin.tpl.php, or (2) certain array parameters to web/phpinfo.php, as demonstrated by...

5.9AI Score

0.033EPSS

2007-05-13 11:19 PM
23
4
cve
cve

CVE-2007-2544

PHP remote file inclusion vulnerability in templates/default/tpl_message.php in PHP TopTree BBS 2.0.1a and earlier allows remote attackers to execute arbitrary PHP code via a URL in the right_file...

7.6AI Score

0.153EPSS

2007-05-09 01:19 AM
33
cve
cve

CVE-2007-2510

Buffer overflow in the make_http_soap_request function in PHP before 5.2.2 has unknown impact and remote attack vectors, possibly related to "/" (slash)...

7.7AI Score

0.016EPSS

2007-05-09 12:19 AM
50
cve
cve

CVE-2007-1864

Buffer overflow in the bundled libxmlrpc library in PHP before 4.4.7, and 5.x before 5.2.2, has unknown impact and remote attack...

7.6AI Score

0.009EPSS

2007-05-09 12:19 AM
68
cve
cve

CVE-2007-2509

CRLF injection vulnerability in the ftp_putcmd function in PHP before 4.4.7, and 5.x before 5.2.2 allows remote attackers to inject arbitrary FTP commands via CRLF sequences in the parameters to earlier FTP...

7.6AI Score

0.02EPSS

2007-05-09 12:19 AM
41
cve
cve

CVE-2007-2511

Buffer overflow in the user_filter_factory_create function in PHP before 5.2.2 has unknown impact and local attack...

7.5AI Score

0.001EPSS

2007-05-09 12:19 AM
41
cve
cve

CVE-2007-2369

Directory traversal vulnerability in picture.php in WebSPELL 4.01.02 and earlier, when PHP before 4.3.0 is used, allows remote attackers to read arbitrary files via a .. (dot dot) in the id...

6.8AI Score

0.004EPSS

2007-04-30 11:19 PM
30
cve
cve

CVE-2007-2346

Multiple PHP remote file inclusion vulnerabilities in PHP-Generics 1.0 beta allow remote attackers to execute arbitrary PHP code via a URL in the _APP_RELATIVE_PATH parameter to (1) include.php, (2) dbcommon/include.php, and (3)...

7.7AI Score

0.153EPSS

2007-04-27 05:19 PM
19
cve
cve

CVE-2007-2204

Multiple PHP remote file inclusion vulnerabilities in GPL PHP Board (GPB) unstable-2001.11.14-1 allow remote attackers to execute arbitrary PHP code via a URL in the root_path parameter to (1) db.mysql.inc.php or (2) gpb.inc.php in include/, or the (3) theme parameter to...

7.7AI Score

0.153EPSS

2007-04-24 08:19 PM
17
cve
cve

CVE-2007-2183

SQL injection vulnerability in index.php in PHP-Ring Webring System (aka uPHP_ring_website) 0.9 allows remote attackers to execute arbitrary SQL commands via the ring...

8.4AI Score

0.004EPSS

2007-04-24 05:19 PM
21
cve
cve

CVE-2007-2007

admin.php in pL-PHP beta 0.9 allows remote attackers to bypass authentication by setting the is_admin parameter to...

6.9AI Score

0.012EPSS

2007-04-12 07:19 PM
16
cve
cve

CVE-2007-2008

Directory traversal vulnerability in admin.php in pL-PHP beta 0.9 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the lang...

7.1AI Score

0.008EPSS

2007-04-12 07:19 PM
23
cve
cve

CVE-2007-2006

Multiple SQL injection vulnerabilities in login.php in pL-PHP beta 0.9 allow remote attackers to execute arbitrary SQL commands via the (1) login or (2) pass...

8.5AI Score

0.002EPSS

2007-04-12 07:19 PM
17
cve
cve

CVE-2007-1982

Multiple PHP remote file inclusion vulnerabilities in Really Simple PHP and Ajax (RSPA) 2007-03-23 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the (1) __IncludeFilePHPClass, (2) __ClassPath, and (3) __class parameters to (a) rspa/framework/Controller_v5.php, and...

7.6AI Score

0.024EPSS

2007-04-12 01:19 AM
19
2
cve
cve

CVE-2007-1978

SQL injection vulnerability in index.php in the Arcade 1.00 module for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the cid parameter in a view_game_list...

8.3AI Score

0.004EPSS

2007-04-12 12:19 AM
21
cve
cve

CVE-2007-1934

Directory traversal vulnerability in member.php in the eBoard 1.0.7 module for PHP-Nuke allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the GLOBALS[name]...

7.2AI Score

0.072EPSS

2007-04-10 11:19 PM
22
cve
cve

CVE-2007-1900

CRLF injection vulnerability in the FILTER_VALIDATE_EMAIL filter in ext/filter in PHP 5.2.0 and 5.2.1 allows context-dependent attackers to inject arbitrary e-mail headers via an e-mail address with a '\n' character, which causes a regular expression to ignore the subsequent part of the address...

7.4AI Score

0.004EPSS

2007-04-10 06:19 PM
57
cve
cve

CVE-2007-1884

Multiple integer signedness errors in the printf function family in PHP 4 before 4.4.5 and PHP 5 before 5.2.1 on 64 bit machines allow context-dependent attackers to execute arbitrary code via (1) certain negative argument numbers that arise in the php_formatted_print function because of 64 to 32.....

7.5AI Score

0.023EPSS

2007-04-06 01:19 AM
25
cve
cve

CVE-2007-1885

Integer overflow in the str_replace function in PHP 4 before 4.4.5 and PHP 5 before 5.2.1 allows context-dependent attackers to execute arbitrary code via a single character search string in conjunction with a long replacement string, which overflows a 32 bit length counter. NOTE: this is...

7.3AI Score

0.018EPSS

2007-04-06 01:19 AM
34
cve
cve

CVE-2007-1886

Integer overflow in the str_replace function in PHP 4.4.5 and PHP 5.2.1 allows context-dependent attackers to have an unknown impact via a single character search string in conjunction with a single character replacement string, which causes an "off by one...

6.6AI Score

0.027EPSS

2007-04-06 01:19 AM
29
cve
cve

CVE-2007-1888

Buffer overflow in the sqlite_decode_binary function in src/encode.c in SQLite 2, as used by PHP 4.x through 5.x and other applications, allows context-dependent attackers to execute arbitrary code via an empty value of the in parameter. NOTE: some PHP installations use a bundled version of...

7.4AI Score

0.015EPSS

2007-04-06 01:19 AM
53
cve
cve

CVE-2007-1883

PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 allows context-dependent attackers to read arbitrary memory locations via an interruption that triggers a user space error handler that changes a parameter to an arbitrary pointer, as demonstrated via the iptcembed function, which calls certain...

7.5AI Score

0.004EPSS

2007-04-06 01:19 AM
45
cve
cve

CVE-2007-1889

Integer signedness error in the _zend_mm_alloc_int function in the Zend Memory Manager in PHP 5.2.0 allows remote attackers to execute arbitrary code via a large emalloc request, related to an incorrect signed long cast, as demonstrated via the HTTP SOAP client in PHP, and via a call to...

7.4AI Score

0.201EPSS

2007-04-06 01:19 AM
36
cve
cve

CVE-2007-1890

Integer overflow in the msg_receive function in PHP 4 before 4.4.5 and PHP 5 before 5.2.1, on FreeBSD and possibly other platforms, allows context-dependent attackers to execute arbitrary code via certain maxsize values, as demonstrated by...

7.7AI Score

0.008EPSS

2007-04-06 01:19 AM
28
cve
cve

CVE-2007-1887

Buffer overflow in the sqlite_decode_binary function in the bundled sqlite library in PHP 4 before 4.4.5 and PHP 5 before 5.2.1 allows context-dependent attackers to execute arbitrary code via an empty value of the in parameter, as demonstrated by calling the sqlite_udf_decode_binary function with....

7.9AI Score

0.011EPSS

2007-04-06 01:19 AM
45
4
cve
cve

CVE-2007-1001

Multiple integer overflows in the (1) createwbmp and (2) readwbmp functions in wbmp.c in the GD library (libgd) in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 allow context-dependent attackers to execute arbitrary code via Wireless Bitmap (WBMP) images with large width or height...

7.8AI Score

0.031EPSS

2007-04-06 12:19 AM
48
cve
cve

CVE-2007-1851

Multiple directory traversal vulnerabilities in Really Simple PHP and Ajax (RSPA) 2007-03-23 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the __class parameter to (1) Controller_v4.php or (2)...

7.4AI Score

0.01EPSS

2007-04-03 04:19 PM
19
cve
cve

CVE-2007-1845

SQL injection vulnerability in show_event.php in the Expanded Calendar (calendar_panel) 2.00 module for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the m_month...

8.4AI Score

0.013EPSS

2007-04-03 04:19 PM
21
cve
cve

CVE-2007-1835

PHP 4 before 4.4.5 and PHP 5 before 5.2.1, when using an empty session save path (session.save_path), uses the TMPDIR default after checking the restrictions, which allows local users to bypass open_basedir...

6.1AI Score

0.0004EPSS

2007-04-03 12:19 AM
31
cve
cve

CVE-2007-1824

Buffer overflow in the php_stream_filter_create function in PHP 5 before 5.2.1 allows remote attackers to cause a denial of service (application crash) via a php://filter/ URL that has a name ending in the '.'...

6.5AI Score

0.025EPSS

2007-04-02 11:19 PM
35
cve
cve

CVE-2007-1825

Buffer overflow in the imap_mail_compose function in PHP 5 before 5.2.1, and PHP 4 before 4.4.5, allows remote attackers to execute arbitrary code via a long boundary string in a type.parameters field. NOTE: as of 20070411, it appears that this issue might be subsumed by...

8AI Score

0.043EPSS

2007-04-02 11:19 PM
38
cve
cve

CVE-2007-1777

Integer overflow in the zip_read_entry function in PHP 4 before 4.4.5 allows remote attackers to execute arbitrary code via a ZIP archive that contains an entry with a length value of 0xffffffff, which is incremented before use in an emalloc call, triggering a heap...

7.6AI Score

0.223EPSS

2007-03-30 01:19 AM
42
Total number of security vulnerabilities1262