Skip to content
Fencer Intel

All · PHP

Newest first, late arrivals on top. Also a feed.

  1. 7.5
    CVE-2003-0166 Integer signedness error in emalloc() function for PHP before 4.3.2 allow remote attackers to cause a denial of service (memory consumption…
    PHP
    3 public exploits EPSS 14.1% chance of exploitation in 30 days, percentile 96%
  2. 7.5
    CVE-2003-0097 Unknown vulnerability in CGI module for PHP 4.3.0 allows attackers to access arbitrary files as the PHP user, and possibly execute PHP code…
    PHP
    EPSS 1.5% chance of exploitation in 30 days, percentile 75%
  3. 7.5
    CVE-2002-1396 Heap-based buffer overflow in the wordwrap function in PHP after 4.1.2 and before 4.3.0 may allow attackers to cause a denial of service or…
    PHP
    EPSS 3.7% chance of exploitation in 30 days, percentile 89%
  4. 7.8
    CVE-2002-2309 php.exe in PHP 3.0 through 4.2.2, when running on Apache, does not terminate properly, which allows remote attackers to cause a denial of s…
    PHP
    1 public exploit EPSS 4.1% chance of exploitation in 30 days, percentile 90%
  5. 5.0
    CVE-2002-2215 The imap_header function in the IMAP functionality for PHP before 4.3.0 allows remote attackers to cause a denial of service via an e-mail…
    PHP
    EPSS 1.4% chance of exploitation in 30 days, percentile 72%
  6. 5.0
    CVE-2002-2214 The php_if_imap_mime_header_decode function in the IMAP functionality in PHP before 4.2.2 allows remote attackers to cause a denial of serv…
    PHP
    EPSS 1.7% chance of exploitation in 30 days, percentile 77%
  7. 4.3
    CVE-2002-1954 Cross-site scripting (XSS) vulnerability in the phpinfo function in PHP 4.2.3 allows remote attackers to inject arbitrary web script or HTM…
    PHP
    1 public exploit EPSS 11.9% chance of exploitation in 30 days, percentile 96%
  8. 5.0
    CVE-2002-1783 CRLF injection vulnerability in PHP 4.2.1 through 4.2.3, when allow_url_fopen is enabled, allows remote attackers to modify HTTP headers fo…
    PHP
    EPSS 16.7% chance of exploitation in 30 days, percentile 97%
  9. 5.0
    CVE-2002-0986 The mail function in PHP 4.x to 4.2.2 does not filter ASCII control characters from its arguments, which could allow remote attackers to mo…
    PHP
    EPSS 4.7% chance of exploitation in 30 days, percentile 91%
  10. 7.5
    CVE-2002-0985 Argument injection vulnerability in the mail function for PHP 4.x to 4.2.2 may allow attackers to bypass safe mode restrictions and modify…
    PHP
    EPSS 3.0% chance of exploitation in 30 days, percentile 87%
  11. 5.0
    CVE-2002-0484 move_uploaded_file in PHP does not does not check for the base directory (open_basedir), which could allow remote attackers to upload files…
    PHP
    1 public exploit EPSS 9.5% chance of exploitation in 30 days, percentile 95%
  12. 7.5
    CVE-2002-0717 PHP 4.2.0 and 4.2.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an HTTP POST request with…
    PHP
    EPSS 11.0% chance of exploitation in 30 days, percentile 95%
  13. 5.0
    CVE-2002-0253 PHP, when not configured with the "display_errors = Off" setting in php.ini, allows remote attackers to obtain the physical path for an inc…
    PHP
    EPSS 5.2% chance of exploitation in 30 days, percentile 92%
  14. 7.5
    CVE-2002-0229 Safe Mode feature (safe_mode) in PHP 3.0 through 4.1.0 allows attackers with access to the MySQL database to bypass Safe Mode access restri…
    PHP
    3 public exploits EPSS 9.6% chance of exploitation in 30 days, percentile 95%
  15. 2.1
    CVE-2002-0121 PHP 4.0 through 4.1.1 stores session IDs in temporary files whose name contains the session ID, which allows local users to hijack web conn…
    PHP
    EPSS 1.2% chance of exploitation in 30 days, percentile 68%
  16. 7.5
    CVE-2002-0081 Buffer overflows in (1) php_mime_split in PHP 4.1.0, 4.1.1, and 4.0.6 and earlier, and (2) php3_mime_split in PHP 3.0.x allows remote attac…
    PHP
    EPSS 24.3% chance of exploitation in 30 days, percentile 97%
  17. 6.4
    CVE-2001-1247 PHP 4.0.4pl1 and 4.0.5 in safe mode allows remote attackers to read and write files owned by the web server UID by uploading a PHP script t…
    PHP
    EPSS 9.4% chance of exploitation in 30 days, percentile 95%
  18. 7.5
    CVE-2001-1246 PHP 4.0.5 through 4.1.0 in safe mode does not properly cleanse the 5th parameter to the mail() function, which allows local users and possi…
    PHP
    1 public exploit EPSS 9.7% chance of exploitation in 30 days, percentile 95%
  19. 5.0
    CVE-2001-0108 PHP Apache module 4.0.4 and earlier allows remote attackers to bypass .htaccess access restrictions via a malformed HTTP request on an unre…
    PHP
    EPSS 1.8% chance of exploitation in 30 days, percentile 79%
  20. 5.0
    CVE-2001-1385 The Apache module for PHP 4.0.0 through PHP 4.0.4, when disabled with the 'engine = off' option for a virtual host, may disable PHP for oth…
    PHP
    EPSS 1.6% chance of exploitation in 30 days, percentile 76%
  21. 10.0
    CVE-2000-0967 PHP 3 and 4 do not properly cleanse user-injected format strings, which allows remote attackers to execute arbitrary commands by triggering…
    PHP
    2 public exploits EPSS 20.6% chance of exploitation in 30 days, percentile 97%
  22. 5.0
    CVE-2000-0860 The file upload capability in PHP versions 3 and 4 allows remote attackers to read arbitrary files by setting hidden form fields whose name…
    PHP
    EPSS 2.7% chance of exploitation in 30 days, percentile 86%
  23. 10.0
    CVE-2000-0059 PHP3 with safe_mode enabled does not properly filter shell metacharacters from commands that are executed by popen, which could allow remot…
    PHP
    1 public exploit EPSS 10.9% chance of exploitation in 30 days, percentile 95%
  24. 7.5
    CVE-1999-0068 CGI PHP mylog script allows an attacker to read any file on the target server.
    PHP
    1 public exploit EPSS 7.0% chance of exploitation in 30 days, percentile 94%
  25. 10.0
    CVE-1999-0238 php.cgi allows attackers to read any file on the system.
    PHP
    1 public exploit EPSS 6.1% chance of exploitation in 30 days, percentile 93%
  26. 7.5
    CVE-1999-0058 Buffer overflow in PHP cgi program, php.cgi allows shell access.
    PHP
    EPSS 1.8% chance of exploitation in 30 days, percentile 78%