Skip to content
Fencer Intel

All · PHP

Newest first, late arrivals on top. Also a feed.

  1. 4.3
    CVE-2007-5899 The output_add_rewrite_var function in PHP before 5.2.5 rewrites local forms in which the ACTION attribute references a non-local URL, whic…
    PHP
    EPSS 3.4% chance of exploitation in 30 days, percentile 89%
  2. 6.9
    CVE-2007-5900 PHP before 5.2.5 allows local users to bypass protection mechanisms configured through php_admin_value or php_admin_flag in httpd.conf by u…
    PHP
  3. 6.4
    CVE-2007-5898 The (1) htmlentities and (2) htmlspecialchars functions in PHP before 5.2.5 accept partial multibyte sequences, which has unknown impact an…
    PHP
    EPSS 2.8% chance of exploitation in 30 days, percentile 86%
  4. 9.3
    CVE-2007-5653 The Component Object Model (COM) functions in PHP 5.x on Windows do not follow safe_mode and disable_functions restrictions, which allows c…
    PHP
    1 public exploit EPSS 4.8% chance of exploitation in 30 days, percentile 92%
  5. 4.3
    CVE-2007-5447 ioncube_loader_win_5.2.dll in the ionCube Loader 6.5 extension for PHP 5.2.4 does not follow safe_mode and disable_functions restrictions,…
    PHP
    1 public exploit EPSS 4.6% chance of exploitation in 30 days, percentile 91%
  6. 7.5
    CVE-2007-5424 The disable_functions feature in PHP 4 and 5 allows attackers to bypass intended restrictions by using an alias, as demonstrated by using i…
    PHP
    EPSS 1.7% chance of exploitation in 30 days, percentile 77%
  7. 5.0
    CVE-2007-5128 SimpNews 2.41.03 on Windows, when PHP before 5.0.0 is used, allows remote attackers to obtain sensitive information via an certain link_dat…
    PHP
    EPSS 1.2% chance of exploitation in 30 days, percentile 69%
  8. 6.8
    CVE-2007-4889 The MySQL extension in PHP 5.2.4 and earlier allows remote attackers to bypass safe_mode and open_basedir restrictions via the MySQL (1) LO…
    PHP
    EPSS 1.2% chance of exploitation in 30 days, percentile 69%
  9. 4.3
    CVE-2007-4887 The dl function in PHP 5.2.4 and earlier allows context-dependent attackers to cause a denial of service (application crash) via a long str…
    PHP
    EPSS 1.7% chance of exploitation in 30 days, percentile 77%
  10. 5.0
    CVE-2007-4840 PHP 5.2.4 and earlier allows context-dependent attackers to cause a denial of service (application crash) via (1) a long string in the out_…
    PHP
    EPSS 3.2% chance of exploitation in 30 days, percentile 88%
  11. 7.5
    CVE-2007-4825 Directory traversal vulnerability in PHP 5.2.4 and earlier allows attackers to bypass open_basedir restrictions and possibly execute arbitr…
    PHP
    EPSS 3.4% chance of exploitation in 30 days, percentile 89%
  12. 5.0
    CVE-2007-4784 The setlocale function in PHP before 5.2.4 allows context-dependent attackers to cause a denial of service (application crash) via a long s…
    PHP
    EPSS 2.5% chance of exploitation in 30 days, percentile 85%
  13. 5.0
    CVE-2007-4783 The iconv_substr function in PHP 5.2.4 and earlier allows context-dependent attackers to cause (1) a denial of service (application crash)…
    PHP
    EPSS 3.6% chance of exploitation in 30 days, percentile 89%
  14. 5.0
    CVE-2007-4782 PHP before 5.2.3 allows context-dependent attackers to cause a denial of service (application crash) via (1) a long string in the pattern p…
    PHP
    EPSS 4.7% chance of exploitation in 30 days, percentile 91%
  15. 5.0
    CVE-2007-4670 Unspecified vulnerability in PHP before 5.2.4 has unknown impact and attack vectors, related to an "Improved fix for MOPB-03-2007," probabl…
    PHP
    EPSS 2.0% chance of exploitation in 30 days, percentile 81%
  16. 7.5
    CVE-2007-4663 Directory traversal vulnerability in PHP before 5.2.4 allows attackers to bypass open_basedir restrictions via unspecified vectors involvin…
    PHP
    EPSS 2.1% chance of exploitation in 30 days, percentile 82%
  17. 7.5
    CVE-2007-4662 Buffer overflow in the php_openssl_make_REQ function in PHP before 5.2.4 has unknown impact and attack vectors.
    PHP
    EPSS 3.4% chance of exploitation in 30 days, percentile 88%
  18. 7.5
    CVE-2007-4661 The chunk_split function in string.c in PHP 5.2.3 does not properly calculate the needed buffer size due to precision loss when performing…
    PHP
    EPSS 2.4% chance of exploitation in 30 days, percentile 84%
  19. 7.5
    CVE-2007-4660 Unspecified vulnerability in the chunk_split function in PHP before 5.2.4 has unknown impact and attack vectors, related to an incorrect si…
    PHP
    EPSS 2.6% chance of exploitation in 30 days, percentile 85%
  20. 7.5
    CVE-2007-4659 The zend_alter_ini_entry function in PHP before 5.2.4 does not properly handle an interruption to the flow of execution triggered by a memo…
    PHP
    EPSS 3.3% chance of exploitation in 30 days, percentile 88%
  21. 7.5
    CVE-2007-4658 The money_format function in PHP 5 before 5.2.4, and PHP 4 before 4.4.8, permits multiple (1) %i and (2) %n tokens, which has unknown impac…
    PHP
    EPSS 2.0% chance of exploitation in 30 days, percentile 81%
  22. 7.5
    CVE-2007-4657 Multiple integer overflows in PHP 4 before 4.4.8, and PHP 5 before 5.2.4, allow remote attackers to obtain sensitive information (memory co…
    PHP
    EPSS 3.0% chance of exploitation in 30 days, percentile 87%
  23. 4.4
    CVE-2007-4652 The session extension in PHP before 5.2.4 might allow local users to bypass open_basedir restrictions via a session file that is a symlink.
    PHP
    1 public exploit
  24. 5.0
    CVE-2007-3998 The wordwrap function in PHP 4 before 4.4.8, and PHP 5 before 5.2.4, does not properly use the breakcharlen variable, which allows remote a…
    PHP
    EPSS 3.0% chance of exploitation in 30 days, percentile 87%
  25. 7.5
    CVE-2007-3997 The (1) MySQL and (2) MySQLi extensions in PHP 4 before 4.4.8, and PHP 5 before 5.2.4, allow remote attackers to bypass safe_mode and open_…
    PHP
    1 public exploit EPSS 13.8% chance of exploitation in 30 days, percentile 96%
  26. 6.8
    CVE-2007-3996 Multiple integer overflows in libgd in PHP before 5.2.4 allow remote attackers to cause a denial of service (application crash) and possibl…
    PHP
    EPSS 4.2% chance of exploitation in 30 days, percentile 91%
  27. 7.5
    CVE-2007-4596 The perl extension in PHP does not follow safe_mode restrictions, which allows context-dependent attackers to execute arbitrary code via th…
    PHP
    1 public exploit EPSS 8.2% chance of exploitation in 30 days, percentile 94%
  28. 7.5
    CVE-2007-4586 Multiple buffer overflows in php_iisfunc.dll in the iisfunc extension for PHP 5.2.0 and earlier allow context-dependent attackers to execut…
    PHP
    1 public exploit EPSS 9.4% chance of exploitation in 30 days, percentile 95%
  29. 4.3
    CVE-2007-4528 The Foreign Function Interface (ffi) extension in PHP 5.0.5 does not follow safe_mode restrictions, which allows context-dependent attacker…
    PHP
    1 public exploit EPSS 4.8% chance of exploitation in 30 days, percentile 92%
  30. 6.8
    CVE-2007-4507 Multiple buffer overflows in the php_ntuser component for PHP 5.2.3 allow context-dependent attackers to cause a denial of service or execu…
    PHP
    1 public exploit EPSS 5.8% chance of exploitation in 30 days, percentile 93%