Skip to content
Fencer Intel

All · PHP

Newest first, late arrivals on top. Also a feed.

  1. 10.0
    CVE-2006-4485 The stripos function in PHP before 5.1.5 has unknown impact and attack vectors related to an out-of-bounds read.
    PHP
    EPSS 2.5% chance of exploitation in 30 days, percentile 84%
  2. 2.6
    CVE-2006-4484 Buffer overflow in the LWZReadByte_ function in ext/gd/libgd/gd_gif_in.c in the GD extension in PHP before 5.1.5 allows remote attackers to…
    PHP
    EPSS 8.7% chance of exploitation in 30 days, percentile 95%
  3. 9.3
    CVE-2006-4483 The cURL extension files (1) ext/curl/interface.c and (2) ext/curl/streams.c in PHP before 5.1.5 permit the CURLOPT_FOLLOWLOCATION option w…
    PHP
    EPSS 2.9% chance of exploitation in 30 days, percentile 87%
  4. 9.3
    CVE-2006-4482 Multiple heap-based buffer overflows in the (1) str_repeat and (2) wordwrap functions in ext/standard/string.c in PHP before 5.1.5, when us…
    PHP
    EPSS 6.1% chance of exploitation in 30 days, percentile 93%
  5. 7.2
    CVE-2006-4481 The (1) file_exists and (2) imap_reopen functions in PHP before 5.1.5 do not check for the safe_mode and open_basedir settings, which allow…
    PHP
    EPSS 1.4% chance of exploitation in 30 days, percentile 73%
  6. 7.5
    CVE-2006-4433 PHP before 4.4.3 and 5.x before 5.1.4 does not limit the character set of the session identifier (PHPSESSID) for third party session handle…
    PHP
    EPSS 1.8% chance of exploitation in 30 days, percentile 79%
  7. 5.0
    CVE-2006-4023 The ip2long function in PHP 5.1.4 and earlier may incorrectly validate an arbitrary string and return a valid network IP address, which all…
    PHP
    EPSS 5.7% chance of exploitation in 30 days, percentile 93%
  8. 4.6
    CVE-2006-4020 scanf.c in PHP 5.1.4 and earlier, and 4.4.3 and earlier, allows context-dependent attackers to execute arbitrary code via a sscanf PHP func…
    PHP
    1 public exploit EPSS 2.0% chance of exploitation in 30 days, percentile 81%
  9. 4.6
    CVE-2006-3011 The error_log function in basic_functions.c in PHP before 4.4.4 and 5.x before 5.1.5 allows local users to bypass safe mode and open_basedi…
    PHP
    1 public exploit EPSS 1.3% chance of exploitation in 30 days, percentile 71%
  10. 9.3
    CVE-2006-3017 zend_hash_del_key_or_index in zend_hash.c in PHP before 4.4.3 and 5.x before 5.1.3 can cause zend_hash_del to delete the wrong element, whi…
    PHP
    EPSS 4.1% chance of exploitation in 30 days, percentile 90%
  11. 2.1
    CVE-2006-2660 Buffer consumption vulnerability in the tempnam function in PHP 5.1.4 and 4.x before 4.4.3 allows local users to bypass restrictions and cr…
    PHP
  12. 2.1
    CVE-2006-2563 The cURL library (libcurl) in PHP 4.4.2 and 5.1.4 allows attackers to bypass safe mode and read files via a file:// request containing null…
    PHP
  13. 6.4
    CVE-2006-1991 The substr_compare function in string.c in PHP 5.1.2 allows context-dependent attackers to cause a denial of service (memory access violati…
    PHP
    EPSS 2.2% chance of exploitation in 30 days, percentile 83%
  14. 5.0
    CVE-2006-1990 Integer overflow in the wordwrap function in string.c in PHP 4.4.2 and 5.1.2 might allow context-dependent attackers to execute arbitrary c…
    PHP
    EPSS 10.6% chance of exploitation in 30 days, percentile 95%
  15. 2.1
    CVE-2006-1549 PHP 4.4.2 and 5.1.2 allows local users to cause a crash (segmentation fault) by defining and executing a recursive function.
    PHP
    1 public exploit
  16. 2.1
    CVE-2006-1608 The copy function in file.c in PHP 4.4.2 and 5.1.2 allows local users to bypass safe mode and read arbitrary files via a source argument co…
    PHP
    1 public exploit EPSS 1.1% chance of exploitation in 30 days, percentile 66%
  17. 2.6
    CVE-2006-1494 Directory traversal vulnerability in file.c in PHP 4.4.2 and 5.1.2 allows local users to bypass open_basedir restrictions allows remote att…
    PHP
    1 public exploit EPSS 6.4% chance of exploitation in 30 days, percentile 93%
  18. 4.3
    CVE-2006-0996 Cross-site scripting (XSS) vulnerability in phpinfo (info.c) in PHP 5.1.2 and 4.4.2 allows remote attackers to inject arbitrary web script…
    PHP
    1 public exploit EPSS 11.1% chance of exploitation in 30 days, percentile 95%
  19. 5.0
    CVE-2006-1490 PHP before 5.1.3-RC1 might allow remote attackers to obtain portions of memory via crafted binary data sent to a script that processes user…
    PHP
    1 public exploit EPSS 21.0% chance of exploitation in 30 days, percentile 97%
  20. 9.3
    CVE-2006-1017 The c-client library 2000, 2001, or 2004 for PHP before 4.4.4 and 5.x before 5.1.5 do not check the (1) safe_mode or (2) open_basedir funct…
    PHP
    EPSS 3.1% chance of exploitation in 30 days, percentile 87%
  21. 6.4
    CVE-2006-1015 Argument injection vulnerability in certain PHP 3.x, 4.x, and 5.x applications, when used with sendmail and when accepting remote input for…
    PHP
    1 public exploit EPSS 12.4% chance of exploitation in 30 days, percentile 96%
  22. 3.2
    CVE-2006-1014 Argument injection vulnerability in certain PHP 4.x and 5.x applications, when used with sendmail and when accepting remote input for the a…
    PHP
    1 public exploit EPSS 1.3% chance of exploitation in 30 days, percentile 71%
  23. 2.6
    CVE-2006-0208 Multiple cross-site scripting (XSS) vulnerabilities in PHP 4.4.1 and 5.1.1, when display_errors and html_errors are on, allow remote attack…
    PHP
    EPSS 3.8% chance of exploitation in 30 days, percentile 90%
  24. 5.0
    CVE-2006-0207 Multiple HTTP response splitting vulnerabilities in PHP 5.1.1 allow remote attackers to inject arbitrary HTTP headers via a crafted Set-Coo…
    PHP
    EPSS 4.3% chance of exploitation in 30 days, percentile 91%
  25. 9.3
    CVE-2006-0200 Format string vulnerability in the error-reporting feature in the mysqli extension in PHP 5.1.0 and 5.1.1 might allow remote attackers to e…
    PHP
    EPSS 20.0% chance of exploitation in 30 days, percentile 97%
  26. 7.5
    CVE-2006-0097 Stack-based buffer overflow in the create_named_pipe function in libmysql.c in PHP 4.3.10 and 4.4.x before 4.4.3 for Windows allows attacke…
    PHP
    1 public exploit EPSS 12.2% chance of exploitation in 30 days, percentile 96%
  27. 5.0
    CVE-2005-3883 CRLF injection vulnerability in the mb_send_mail function in PHP before 5.1.0 might allow remote attackers to inject arbitrary e-mail heade…
    PHP
    EPSS 3.1% chance of exploitation in 30 days, percentile 87%
  28. 5.0
    CVE-2005-3353 The exif_read_data function in the Exif module in PHP before 4.4.1 allows remote attackers to cause a denial of service (infinite loop) via…
    PHP
    EPSS 7.7% chance of exploitation in 30 days, percentile 94%
  29. 7.5
    CVE-2005-3392 Unspecified vulnerability in PHP before 4.4.1, when using the virtual function on Apache 2, allows remote attackers to bypass safe_mode and…
    PHP
    EPSS 6.9% chance of exploitation in 30 days, percentile 94%
  30. 7.5
    CVE-2005-3391 Multiple vulnerabilities in PHP before 4.4.1 allow remote attackers to bypass safe_mode and open_basedir restrictions via unknown attack ve…
    PHP
    EPSS 6.9% chance of exploitation in 30 days, percentile 94%