PHP — популярный язык сценариев общего назначения, особенно подходящий для веб-разработки.

The IPv6 branch of the FastCGI client access check compares only the first 12 bytes of a 16-byte IPv6 address, so listen.allowed_clients matches on a /96 prefix instead of the exact address. An attacker who can source an address sharing the first 96 bits with an allowed one passes the check and reaches the FastCGI endpoint.

cleanup_xml_node() in the SOAP XML parser recurses once per XML nesting level with no depth limit. An unauthenticated attacker can post a SOAP request containing tens of thousands of nested elements to any SoapServer endpoint, exhaust the stack and crash the process. The same unbounded recursion exists in the SOAP value decoder and in the WSDL node search helper.

The mysqlnd wire protocol parser reads fields out of server packets be ...

The SOAP HTTP client guards its response buffer growth with a check th ...

On Windows, PHP's filesystem and stream APIs do not reject reserved de ...

phar_tar_number() parses the octal size field of a TAR header into a u ...

The convert.base64-encode, convert.quoted-printable-encode and convert ...

PHP's OpenSSL stream peer verification checks the certificate's subjec ...

The IPv6 branch of the FastCGI client access check compares only the f ...

php_openssl_matches_wildcard_name() in ext/openssl/xp_ssl.c underflows ...