PHP — популярный язык сценариев общего назначения, особенно подходящий для веб-разработки.
Релизный цикл, информация об уязвимостях
График релизов
Количество 3 984
CVE-2012-3450
pdo_sql_parser.re in the PDO extension in PHP before 5.3.14 and 5.4.x before 5.4.4 does not properly determine the end of the query string during parsing of prepared statements, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted parameter value.
CVE-2012-3365
The SQLite functionality in PHP before 5.3.15 allows remote attackers to bypass the open_basedir protection mechanism via unspecified vectors.
CVE-2012-3365
The SQLite functionality in PHP before 5.3.15 allows remote attackers ...
CVE-2012-2688
Unspecified vulnerability in the _php_stream_scandir function in the stream implementation in PHP before 5.3.15 and 5.4.x before 5.4.5 has unknown impact and remote attack vectors, related to an "overflow."
CVE-2012-2688
Unspecified vulnerability in the _php_stream_scandir function in the s ...
CVE-2012-3365
The SQLite functionality in PHP before 5.3.15 allows remote attackers to bypass the open_basedir protection mechanism via unspecified vectors.
CVE-2012-2688
Unspecified vulnerability in the _php_stream_scandir function in the stream implementation in PHP before 5.3.15 and 5.4.x before 5.4.5 has unknown impact and remote attack vectors, related to an "overflow."
BDU:2022-02628
Уязвимость интерпретатора языка программирования PHP, связанная с ошибками управления привилегиями, позволяющая нарушителю обойти механизм защиты open_basedir
BDU:2022-02620
Уязвимость функции _php_stream_scandir интерпретатора языка программирования PHP, позволяющая нарушителю выполнить произвольный код
CVE-2012-2688
Unspecified vulnerability in the _php_stream_scandir function in the stream implementation in PHP before 5.3.15 and 5.4.x before 5.4.5 has unknown impact and remote attack vectors, related to an "overflow."
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
 | CVE-2012-3450 pdo_sql_parser.re in the PDO extension in PHP before 5.3.14 and 5.4.x before 5.4.4 does not properly determine the end of the query string during parsing of prepared statements, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted parameter value. | CVSS2: 2.6 | 11% Средний | почти 14 лет назад |
 | CVE-2012-3365 The SQLite functionality in PHP before 5.3.15 allows remote attackers to bypass the open_basedir protection mechanism via unspecified vectors. | CVSS2: 5 | 3% Низкий | около 14 лет назад |
| CVE-2012-3365 The SQLite functionality in PHP before 5.3.15 allows remote attackers ... | CVSS2: 5 | 3% Низкий | около 14 лет назад |
| CVE-2012-2688 Unspecified vulnerability in the _php_stream_scandir function in the stream implementation in PHP before 5.3.15 and 5.4.x before 5.4.5 has unknown impact and remote attack vectors, related to an "overflow." | CVSS2: 10 | 10% Средний | около 14 лет назад |
| CVE-2012-2688 Unspecified vulnerability in the _php_stream_scandir function in the s ... | CVSS2: 10 | 10% Средний | около 14 лет назад |
| CVE-2012-3365 The SQLite functionality in PHP before 5.3.15 allows remote attackers to bypass the open_basedir protection mechanism via unspecified vectors. | CVSS2: 5 | 3% Низкий | около 14 лет назад |
| CVE-2012-2688 Unspecified vulnerability in the _php_stream_scandir function in the stream implementation in PHP before 5.3.15 and 5.4.x before 5.4.5 has unknown impact and remote attack vectors, related to an "overflow." | CVSS2: 10 | 10% Средний | около 14 лет назад |
 | BDU:2022-02628 Уязвимость интерпретатора языка программирования PHP, связанная с ошибками управления привилегиями, позволяющая нарушителю обойти механизм защиты open_basedir | CVSS3: 3.7 | 3% Низкий | около 14 лет назад |
| BDU:2022-02620 Уязвимость функции _php_stream_scandir интерпретатора языка программирования PHP, позволяющая нарушителю выполнить произвольный код | CVSS3: 8.1 | 10% Средний | около 14 лет назад |
 | CVE-2012-2688 Unspecified vulnerability in the _php_stream_scandir function in the stream implementation in PHP before 5.3.15 and 5.4.x before 5.4.5 has unknown impact and remote attack vectors, related to an "overflow." | CVSS2: 4.4 | 10% Средний | около 14 лет назад |
Уязвимостей на страницу