Skip to content
Fencer Intel

All · PHP

Newest first, late arrivals on top. Also a feed.

  1. 7.5
    CVE-2005-3390 The RFC1867 file upload feature in PHP 4.x up to 4.4.0 and 5.x up to 5.0.5, when register_globals is enabled, allows remote attackers to mo…
    PHP
    1 public exploit EPSS 65.5% chance of exploitation in 30 days, percentile 99.2%
  2. 5.0
    CVE-2005-3389 The parse_str function in PHP 4.x up to 4.4.0 and 5.x up to 5.0.5, when called with only one parameter, allows remote attackers to enable t…
    PHP
    EPSS 6.3% chance of exploitation in 30 days, percentile 93%
  3. 4.3
    CVE-2005-3388 Cross-site scripting (XSS) vulnerability in the phpinfo function in PHP 4.x up to 4.4.0 and 5.x up to 5.0.5 allows remote attackers to inje…
    PHP
    1 public exploit EPSS 48.9% chance of exploitation in 30 days, percentile 98%
  4. 2.1
    CVE-2005-3319 The apache2handler SAPI (sapi_apache2.c) in the Apache module (mod_php) for PHP 5.x before 5.1.0 final and 4.4 before 4.4.1 final allows at…
    PHP
  5. 2.1
    CVE-2005-3054 fopen_wrappers.c in PHP 4.4.0, and possibly other versions, does not properly restrict access to other directories when the open_basedir di…
    PHP
  6. 5.0
    CVE-2005-1043 exif.c in PHP before 4.3.11 allows remote attackers to cause a denial of service (memory consumption and crash) via an EXIF header with a l…
    PHP
    EPSS 1.9% chance of exploitation in 30 days, percentile 80%
  7. 7.5
    CVE-2005-1042 Integer overflow in the exif_process_IFD_TAG function in exif.c in PHP before 4.3.11 may allow remote attackers to execute arbitrary code v…
    PHP
    EPSS 4.0% chance of exploitation in 30 days, percentile 90%
  8. 5.0
    CVE-2005-0525 The php_next_marker function in image.c for PHP 4.2.2, 4.3.9, 4.3.10 and 5.0.3, as reachable by the getimagesize PHP function, allows remot…
    PHP
    EPSS 2.8% chance of exploitation in 30 days, percentile 86%
  9. 5.0
    CVE-2005-0524 The php_handle_iff function in image.c for PHP 4.2.2, 4.3.9, 4.3.10 and 5.0.3, as reachable by the getimagesize PHP function, allows remote…
    PHP
    EPSS 3.5% chance of exploitation in 30 days, percentile 89%
  10. 2.1
    CVE-2005-0596 PHP 4 (PHP4) allows attackers to cause a denial of service (daemon crash) by using the readfile function on a file whose size is a multiple…
    PHP
  11. 5.0
    CVE-2004-1392 PHP 4.0 with cURL functions allows remote attackers to bypass the open_basedir setting and read arbitrary files via a file: URL argument to…
    PHP
    1 public exploit EPSS 10.8% chance of exploitation in 30 days, percentile 95%
  12. 10.0
    CVE-2004-1065 Buffer overflow in the exif_read_data function in PHP before 4.3.10 and PHP 5.x up to 5.0.2 allows remote attackers to execute arbitrary co…
    PHP
    EPSS 10.0% chance of exploitation in 30 days, percentile 95%
  13. 10.0
    CVE-2004-1019 The deserialization code in PHP before 4.3.10 and PHP 5.x up to 5.0.2 allows remote attackers to cause a denial of service and execute arbi…
    PHP
    EPSS 8.0% chance of exploitation in 30 days, percentile 94%
  14. 10.0
    CVE-2004-1064 The safe mode checks in PHP 4.x to 4.3.9 and PHP 5.x to 5.0.2 truncate the file path before passing the data to the realpath function, whic…
    PHP
    EPSS 3.7% chance of exploitation in 30 days, percentile 90%
  15. 10.0
    CVE-2004-1063 PHP 4.x to 4.3.9, and PHP 5.x to 5.0.2, when running in safe mode on a multithreaded Unix webserver, allows local users to bypass safe_mode…
    PHP
    EPSS 4.2% chance of exploitation in 30 days, percentile 91%
  16. 5.0
    CVE-2004-1020 The addslashes function in PHP 4.3.9 does not properly escape a NULL (/0) character, which may allow remote attackers to read arbitrary fil…
    PHP
    1 public exploit EPSS 7.1% chance of exploitation in 30 days, percentile 94%
  17. 10.0
    CVE-2004-1018 Multiple integer handling errors in PHP before 4.3.10 allow attackers to bypass safe mode restrictions, cause a denial of service, or execu…
    PHP
    2 public exploits EPSS 16.2% chance of exploitation in 30 days, percentile 96%
  18. 2.1
    CVE-2004-0959 rfc1867.c in PHP before 5.0.2 allows local users to upload files to arbitrary locations via a PHP script with a certain MIME header that ca…
    PHP
  19. 5.0
    CVE-2004-0958 php_variables.c in PHP before 5.0.2 allows remote attackers to read sensitive memory contents via (1) GET, (2) POST, or (3) COOKIE GPC vari…
    PHP
    1 public exploit EPSS 9.7% chance of exploitation in 30 days, percentile 95%
  20. 6.8
    CVE-2004-0595 The strip_tags function in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, does not filter null (\0) characters within tag names when restrict…
    PHP
    1 public exploit EPSS 45.2% chance of exploitation in 30 days, percentile 98%
  21. 5.1
    CVE-2004-0594 The memory_limit functionality in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, under certain conditions such as when register_globals is en…
    PHP
    1 public exploit EPSS 54.9% chance of exploitation in 30 days, percentile 99%
  22. 10.0
    CVE-2004-0542 PHP before 4.3.7 on Win32 platforms does not properly filter all shell metacharacters, which allows local or remote attackers to execute ar…
    PHP
    EPSS 31.1% chance of exploitation in 30 days, percentile 98%
  23. 5.0
    CVE-2003-1303 Buffer overflow in the imap_fetch_overview function in the IMAP functionality (php_imap.c) in PHP before 4.3.3 allows remote attackers to c…
    PHP
    EPSS 12.1% chance of exploitation in 30 days, percentile 96%
  24. 5.0
    CVE-2003-1302 The IMAP functionality in PHP before 4.3.1 allows remote attackers to cause a denial of service via an e-mail message with a (1) To or (2)…
    PHP
    EPSS 1.4% chance of exploitation in 30 days, percentile 72%
  25. 7.5
    CVE-2003-0249 PHP treats unknown methods such as "PoSt" as a GET request, which could allow attackers to intended access restrictions if PHP is running o…
    PHP
    EPSS 1.2% chance of exploitation in 30 days, percentile 69%
  26. 7.5
    CVE-2003-0863 The php_check_safe_mode_include_dir function in fopen_wrappers.c of PHP 4.3.x returns a success value (0) when the safe_mode_include_dir va…
    PHP
    1 public exploit EPSS 6.9% chance of exploitation in 30 days, percentile 94%
  27. 10.0
    CVE-2003-0861 Integer overflows in (1) base64_encode and (2) the GD library for PHP before 4.3.3 have unknown impact and unknown attack vectors.
    PHP
    EPSS 1.5% chance of exploitation in 30 days, percentile 74%
  28. 10.0
    CVE-2003-0860 Buffer overflows in PHP before 4.3.3 have unknown impact and unknown attack vectors.
    PHP
    EPSS 1.6% chance of exploitation in 30 days, percentile 76%
  29. 4.3
    CVE-2003-0442 Cross-site scripting (XSS) vulnerability in the transparent SID support capability for PHP before 4.3.2 (session.use_trans_sid) allows remo…
    PHP
    1 public exploit EPSS 7.0% chance of exploitation in 30 days, percentile 94%
  30. 7.5
    CVE-2003-0172 Buffer overflow in openlog function for PHP 4.3.1 on Windows operating system, and possibly other OSes, allows remote attackers to cause a…
    PHP
    1 public exploit EPSS 19.0% chance of exploitation in 30 days, percentile 97%