Improper Encoding Or Escaping Of Output

🗓️ 19 Jun 2024 11:10:29Reported by Veracode Vulnerability DatabaseType

php81 vulnerability improper encodin

Reporter	Title	Published	Views	Family All 126
IBM Security Bulletins	Security Bulletin: Vulnerability in PHP might affect IBM Storage Sentinel Anomaly Scan Engine.	14 Apr 202506:52	–	ibm
FreeBSD	php -- Multiple vulnerabilities	11 Apr 202400:00	–	freebsd
GithubExploit	Exploit for Improper Encoding or Escaping of Output in Php	18 Jul 202415:25	–	githubexploit
AlpineLinux	CVE-2024-1874	29 Apr 202403:57	–	alpinelinux
AlpineLinux	CVE-2024-5585	9 Jun 202418:36	–	alpinelinux
BDU FSTEC	The vulnerability of the proc_open() function in the PHP interpreter allows attackers to execute arbitrary commands.	22 Jul 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the proc_open() function in the PHP interpreter allows attackers to execute arbitrary commands.	22 Sep 202500:00	–	bdu_fstec
CBLMariner	CVE-2024-1874 affecting package php for versions less than 8.3.8-1	2 Jul 202423:30	–	cbl_mariner
CBLMariner	CVE-2024-5585 affecting package php for versions less than 8.1.29-1	16 Jun 202416:44	–	cbl_mariner
CBLMariner	CVE-2024-5585 affecting package php for versions less than 8.3.8-1	2 Jul 202423:30	–	cbl_mariner

Vulners

Node

AND

php82 php82Match8.2.16-r0os

php82 php82Match8.2.18-r0os

php82 php82Match8.2.19-r0os

php82 php82Match8.2.15-r0os

php82 php82Match8.2.11-r2os

php82 php82Match8.2.17-r0os

php82 php82Match8.2.12-r1os

php82 php82Match8.2.13-r0os

AND

php81 php81Match8.1.26-r0os

php81 php81Match8.1.27-r0os

php81 php81Match8.1.25-r1os

php81 php81Match8.1.28-r0os

AND

php83 php83Match8.3.7-r0os

php83 php83Match8.3.6-r0os

php83 php83Match8.3.3-r0os

php83 php83Match8.3.0-r0os

php83 php83Match8.3.4-r0os

Source	Link
secdb	www.secdb.alpinelinux.org/v3.19/community.yaml
github	www.github.com/php/php-src/security/advisories/GHSA-9fcc-425m-g385
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/PKGTQUOA2NTZ3RXN22CSAUJPIRUYRB4B/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/W45DBOH56NQDRTOM2DN2LNA2FZIMC3PK/
security	www.security.netapp.com/advisory/ntap-20240726-0002/
vicarius	www.vicarius.io/vsociety/posts/command-injection-vulnerability-in-php-on-windows-systems-cve-2024-1874-and-cve-2024-5585
openwall	www.openwall.com/lists/oss-security/2024/06/07/1

28 Jul 2024 17:02Current

7.6High risk

Vulners AI Score7.6

CVSS 3.17.7 - 8.8

EPSS0.32568

SSVC