Skip to content
Fencer Intel

All · PHP

Newest first, late arrivals on top. Also a feed.

  1. 4.6
    CVE-2007-4441 Buffer overflow in php_win32std.dll in the win32std extension for PHP 5.2.0 and earlier allows context-dependent attackers to execute arbit…
    PHP
    3 public exploits EPSS 1.5% chance of exploitation in 30 days, percentile 75%
  2. 7.5
    CVE-2007-4255 Buffer overflow in the mSQL extension in PHP 5.2.3 allows context-dependent attackers to execute arbitrary code via a long first argument t…
    PHP
    2 public exploits EPSS 9.3% chance of exploitation in 30 days, percentile 95%
  3. 7.5
    CVE-2007-4033 Buffer overflow in the intT1_EnvGetCompletePath function in lib/t1lib/t1env.c in t1lib 5.1.1 allows context-dependent attackers to execute…
    PHP
    2 public exploits EPSS 18.7% chance of exploitation in 30 days, percentile 97%
  4. 6.8
    CVE-2007-4010 The win32std extension in PHP 5.2.3 does not follow safe_mode and disable_functions restrictions, which allows remote attackers to execute…
    PHP
    1 public exploit EPSS 5.5% chance of exploitation in 30 days, percentile 92%
  5. 6.8
    CVE-2007-3806 The glob function in PHP 5.2.3 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via an i…
    PHP
    1 public exploit EPSS 10.7% chance of exploitation in 30 days, percentile 95%
  6. 4.3
    CVE-2007-3799 The session_start function in ext/session in PHP 4.x up to 4.4.7 and 5.x up to 5.2.3 allows remote attackers to insert arbitrary attributes…
    PHP
    1 public exploit EPSS 7.9% chance of exploitation in 30 days, percentile 94%
  7. 5.8
    CVE-2007-3790 The com_print_typeinfo function in the bz2 extension in PHP 5.2.3 allows context-dependent attackers to cause a denial of service via a lon…
    PHP
    1 public exploit EPSS 3.0% chance of exploitation in 30 days, percentile 87%
  8. 6.8
    CVE-2007-3378 The (1) session_save_path, (2) ini_set, and (3) error_log functions in PHP 4.4.7 and earlier, and PHP 5 5.2.3 and earlier, when invoked fro…
    PHP
    EPSS 5.3% chance of exploitation in 30 days, percentile 92%
  9. 7.5
    CVE-2007-3294 Multiple buffer overflows in libtidy, as used in the Tidy extension for PHP 5.2.3 and possibly other products, allow context-dependent atta…
    PHP
    1 public exploit EPSS 9.4% chance of exploitation in 30 days, percentile 95%
  10. 5.0
    CVE-2007-3205 The parse_str function in (1) PHP, (2) Hardened-PHP, and (3) Suhosin, when called without a second parameter, might allow remote attackers…
    PHP
    EPSS 2.2% chance of exploitation in 30 days, percentile 82%
  11. 5.0
    CVE-2007-3007 PHP 5 before 5.2.3 does not enforce the open_basedir or safe_mode restriction in certain cases, which allows context-dependent attackers to…
    PHP
    EPSS 2.7% chance of exploitation in 30 days, percentile 86%
  12. 6.8
    CVE-2007-2872 Multiple integer overflows in the chunk_split function in PHP 5 before 5.2.3 and PHP 4 before 4.4.8 allow remote attackers to cause a denia…
    PHP
    1 public exploit EPSS 8.9% chance of exploitation in 30 days, percentile 95%
  13. 9.3
    CVE-2007-2844 PHP 4.x and 5.x before 5.2.1, when running on multi-threaded systems, does not ensure thread safety for libc crypt function calls using pro…
    PHP
    EPSS 2.9% chance of exploitation in 30 days, percentile 86%
  14. 10.0
    CVE-2007-0448 The fopen function in PHP 5.2.0 does not properly handle invalid URI handlers, which allows context-dependent attackers to bypass safe_mode…
    PHP
    1 public exploit EPSS 7.1% chance of exploitation in 30 days, percentile 94%
  15. 2.1
    CVE-2006-7204 The imap_body function in PHP before 4.4.4 does not implement safemode or open_basedir checks, which allows local users to read arbitrary f…
    PHP
  16. 4.3
    CVE-2007-2748 The substr_count function in PHP 5.2.1 and earlier allows context-dependent attackers to obtain sensitive information via unspecified vecto…
    PHP
    EPSS 1.4% chance of exploitation in 30 days, percentile 72%
  17. 5.0
    CVE-2007-2728 The soap extension in PHP calls php_rand_r with an uninitialized seed variable, which has unknown impact and attack vectors, a related issu…
    PHP
    EPSS 2.9% chance of exploitation in 30 days, percentile 87%
  18. 2.6
    CVE-2007-2727 The mcrypt_create_iv function in ext/mcrypt/mcrypt.c in PHP before 4.4.7, 5.2.1, and possibly 5.0.x and other PHP 5 versions, calls php_ran…
    PHP
    EPSS 1.9% chance of exploitation in 30 days, percentile 79%
  19. 7.2
    CVE-2007-2511 Buffer overflow in the user_filter_factory_create function in PHP before 5.2.2 has unknown impact and local attack vectors.
    PHP
  20. 5.1
    CVE-2007-2510 Buffer overflow in the make_http_soap_request function in PHP before 5.2.2 has unknown impact and remote attack vectors, possibly related t…
    PHP
    EPSS 2.3% chance of exploitation in 30 days, percentile 83%
  21. 2.6
    CVE-2007-2509 CRLF injection vulnerability in the ftp_putcmd function in PHP before 4.4.7, and 5.x before 5.2.2 allows remote attackers to inject arbitra…
    PHP
    EPSS 2.1% chance of exploitation in 30 days, percentile 81%
  22. 7.5
    CVE-2007-1864 Buffer overflow in the bundled libxmlrpc library in PHP before 4.4.7, and 5.x before 5.2.2, has unknown impact and remote attack vectors.
    PHP
    EPSS 2.9% chance of exploitation in 30 days, percentile 87%
  23. 5.0
    CVE-2007-2369 Directory traversal vulnerability in picture.php in WebSPELL 4.01.02 and earlier, when PHP before 4.3.0 is used, allows remote attackers to…
    PHP
    1 public exploit EPSS 8.4% chance of exploitation in 30 days, percentile 95%
  24. 5.0
    CVE-2007-1900 CRLF injection vulnerability in the FILTER_VALIDATE_EMAIL filter in ext/filter in PHP 5.2.0 and 5.2.1 allows context-dependent attackers to…
    PHP
    EPSS 2.6% chance of exploitation in 30 days, percentile 85%
  25. 7.5
    CVE-2007-1890 Integer overflow in the msg_receive function in PHP 4 before 4.4.5 and PHP 5 before 5.2.1, on FreeBSD and possibly other platforms, allows…
    PHP
    1 public exploit EPSS 7.9% chance of exploitation in 30 days, percentile 94%
  26. 7.5
    CVE-2007-1889 Integer signedness error in the _zend_mm_alloc_int function in the Zend Memory Manager in PHP 5.2.0 allows remote attackers to execute arbi…
    PHP
    EPSS 3.1% chance of exploitation in 30 days, percentile 88%
  27. 7.5
    CVE-2007-1888 Buffer overflow in the sqlite_decode_binary function in src/encode.c in SQLite 2, as used by PHP 4.x through 5.x and other applications, al…
    PHP
    EPSS 3.5% chance of exploitation in 30 days, percentile 89%
  28. 7.5
    CVE-2007-1887 Buffer overflow in the sqlite_decode_binary function in the bundled sqlite library in PHP 4 before 4.4.5 and PHP 5 before 5.2.1 allows cont…
    PHP
    EPSS 4.8% chance of exploitation in 30 days, percentile 92%
  29. 6.8
    CVE-2007-1886 Integer overflow in the str_replace function in PHP 4.4.5 and PHP 5.2.1 allows context-dependent attackers to have an unknown impact via a…
    PHP
    EPSS 1.8% chance of exploitation in 30 days, percentile 78%
  30. 7.5
    CVE-2007-1885 Integer overflow in the str_replace function in PHP 4 before 4.4.5 and PHP 5 before 5.2.1 allows context-dependent attackers to execute arb…
    PHP
    EPSS 4.3% chance of exploitation in 30 days, percentile 91%