Skip to content
Fencer Intel

All · PHP

Newest first, late arrivals on top. Also a feed.

  1. 6.8
    CVE-2007-1884 Multiple integer signedness errors in the printf function family in PHP 4 before 4.4.5 and PHP 5 before 5.2.1 on 64 bit machines allow cont…
    PHP
    EPSS 3.2% chance of exploitation in 30 days, percentile 88%
  2. 7.8
    CVE-2007-1883 PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 allows context-dependent attackers to read arbitrary memory locations via an interruption t…
    PHP
    EPSS 1.4% chance of exploitation in 30 days, percentile 73%
  3. 6.8
    CVE-2007-1001 Multiple integer overflows in the (1) createwbmp and (2) readwbmp functions in wbmp.c in the GD library (libgd) in PHP 4.0.0 through 4.4.6…
    PHP
    1 public exploit EPSS 8.4% chance of exploitation in 30 days, percentile 95%
  4. 4.6
    CVE-2007-1835 PHP 4 before 4.4.5 and PHP 5 before 5.2.1, when using an empty session save path (session.save_path), uses the TMPDIR default after checkin…
    PHP
    1 public exploit
  5. 7.5
    CVE-2007-1825 Buffer overflow in the imap_mail_compose function in PHP 5 before 5.2.1, and PHP 4 before 4.4.5, allows remote attackers to execute arbitra…
    PHP
    1 public exploit EPSS 10.5% chance of exploitation in 30 days, percentile 95%
  6. 5.1
    CVE-2007-1824 Buffer overflow in the php_stream_filter_create function in PHP 5 before 5.2.1 allows remote attackers to cause a denial of service (applic…
    PHP
    EPSS 2.7% chance of exploitation in 30 days, percentile 86%
  7. 7.5
    CVE-2007-1777 Integer overflow in the zip_read_entry function in PHP 4 before 4.4.5 allows remote attackers to execute arbitrary code via a ZIP archive t…
    PHP
    1 public exploit EPSS 15.5% chance of exploitation in 30 days, percentile 96%
  8. 7.8
    CVE-2007-1718 CRLF injection vulnerability in the mail function in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 allows remote attackers to inject arbi…
    PHP
    1 public exploit EPSS 6.9% chance of exploitation in 30 days, percentile 94%
  9. 5.0
    CVE-2007-1717 The mail function in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 truncates e-mail messages at the first ASCIIZ ('\0') byte, which might…
    PHP
    1 public exploit EPSS 4.8% chance of exploitation in 30 days, percentile 92%
  10. 6.8
    CVE-2007-1711 Double free vulnerability in the unserializer in PHP 4.4.5 and 4.4.6 allows context-dependent attackers to execute arbitrary code by overwr…
    PHP
    1 public exploit EPSS 7.7% chance of exploitation in 30 days, percentile 94%
  11. 4.3
    CVE-2007-1710 The readfile function in PHP 4.4.4, 5.1.6, and 5.2.1 allows context-dependent attackers to bypass safe_mode restrictions and read arbitrary…
    PHP
  12. 4.3
    CVE-2007-1709 Buffer overflow in the confirm_phpdoc_compiled function in the phpDOC extension (PECL phpDOC) in PHP 5.2.1 allows context-dependent attacke…
    PHP
    1 public exploit EPSS 2.0% chance of exploitation in 30 days, percentile 81%
  13. 6.8
    CVE-2007-1701 PHP 4 before 4.4.5, and PHP 5 before 5.2.1, when register_globals is enabled, allows context-dependent attackers to execute arbitrary code…
    PHP
    1 public exploit EPSS 9.4% chance of exploitation in 30 days, percentile 95%
  14. 7.5
    CVE-2007-1700 The session extension in PHP 4 before 4.4.5, and PHP 5 before 5.2.1, calculates the reference count for the session variables without consi…
    PHP
    1 public exploit EPSS 9.1% chance of exploitation in 30 days, percentile 95%
  15. 7.8
    CVE-2007-1649 PHP 5.2.1 allows context-dependent attackers to read portions of heap memory by executing certain scripts with a serialized data input stri…
    PHP
    1 public exploit EPSS 7.5% chance of exploitation in 30 days, percentile 94%
  16. 6.8
    CVE-2007-1584 Buffer underflow in the header function in PHP 5.2.0 allows context-dependent attackers to execute arbitrary code by passing an all-whitesp…
    PHP
    2 public exploits EPSS 5.3% chance of exploitation in 30 days, percentile 92%
  17. 6.8
    CVE-2007-1583 The mb_parse_str function in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 sets the internal register_globals flag and does not disable i…
    PHP
    1 public exploit EPSS 5.4% chance of exploitation in 30 days, percentile 92%
  18. 6.8
    CVE-2007-1582 The resource system in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 allows context-dependent attackers to execute arbitrary code by inte…
    PHP
    1 public exploit EPSS 6.0% chance of exploitation in 30 days, percentile 93%
  19. 9.3
    CVE-2007-1581 The resource system in PHP 5.0.0 through 5.2.1 allows context-dependent attackers to execute arbitrary code by interrupting the hash_update…
    PHP
    1 public exploit EPSS 8.0% chance of exploitation in 30 days, percentile 94%
  20. 6.8
    CVE-2007-1522 Double free vulnerability in the session extension in PHP 5.2.0 and 5.2.1 allows context-dependent attackers to execute arbitrary code via…
    PHP
    1 public exploit EPSS 6.7% chance of exploitation in 30 days, percentile 94%
  21. 6.8
    CVE-2007-1521 Double free vulnerability in PHP before 4.4.7, and 5.x before 5.2.2, allows context-dependent attackers to execute arbitrary code by interr…
    PHP
    1 public exploit EPSS 8.6% chance of exploitation in 30 days, percentile 95%
  22. 4.6
    CVE-2007-1484 The array_user_key_compare function in PHP 4.4.6 and earlier, and 5.x up to 5.2.1, makes erroneous calls to zval_dtor, which triggers memor…
    PHP
    1 public exploit EPSS 1.1% chance of exploitation in 30 days, percentile 66%
  23. 5.4
    CVE-2007-1475 Multiple buffer overflows in the (1) ibase_connect and (2) ibase_pconnect functions in the interbase extension in PHP 4.4.6 and earlier all…
    PHP
    1 public exploit EPSS 2.4% chance of exploitation in 30 days, percentile 84%
  24. 7.8
    CVE-2007-1461 The compress.bzip2:// URL wrapper provided by the bz2 extension in PHP before 4.4.7, and 5.x before 5.2.2, does not implement safemode or o…
    PHP
    EPSS 3.4% chance of exploitation in 30 days, percentile 88%
  25. 5.0
    CVE-2007-1460 The zip:// URL wrapper provided by the PECL zip extension in PHP before 4.4.7, and 5.2.0 and 5.2.1, does not implement safemode or open_bas…
    PHP
    EPSS 2.0% chance of exploitation in 30 days, percentile 81%
  26. 4.3
    CVE-2007-1454 ext/filter in PHP 5.2.0, when FILTER_SANITIZE_STRING is used with the FILTER_FLAG_STRIP_LOW flag, does not properly strip HTML tags, which…
    PHP
    EPSS 1.4% chance of exploitation in 30 days, percentile 72%
  27. 7.5
    CVE-2007-1453 Buffer underflow in the PHP_FILTER_TRIM_DEFAULT macro in the filtering extension (ext/filter) in PHP 5.2.0 allows context-dependent attacke…
    PHP
    1 public exploit EPSS 9.7% chance of exploitation in 30 days, percentile 95%
  28. 5.0
    CVE-2007-1452 The FDF support (ext/fdf) in PHP 5.2.0 and earlier does not implement the input filtering hooks for ext/filter, which allows remote attacke…
    PHP
    1 public exploit EPSS 5.5% chance of exploitation in 30 days, percentile 92%
  29. 7.5
    CVE-2007-1413 Buffer overflow in the snmpget function in the snmp extension in PHP 5.2.3 and earlier, including PHP 4.4.6 and probably other PHP 4 versio…
    PHP
    3 public exploits EPSS 11.2% chance of exploitation in 30 days, percentile 96%
  30. 7.8
    CVE-2007-1412 The cpdf_open function in the ClibPDF (cpdf) extension in PHP 4.4.6 allows context-dependent attackers to obtain sensitive information (scr…
    PHP
    1 public exploit EPSS 6.2% chance of exploitation in 30 days, percentile 93%