PHP — популярный язык сценариев общего назначения, особенно подходящий для веб-разработки.

Multiple integer overflows in PHP 4 before 4.4.8, and PHP 5 before 5.2.4, allow remote attackers to obtain sensitive information (memory contents) or cause a denial of service (thread crash) via a large len value to the (1) strspn or (2) strcspn function, which triggers an out-of-bounds read. NOTE: this affects different product versions than CVE-2007-3996.

Unspecified vulnerability in the chunk_split function in PHP before 5.2.4 has unknown impact and attack vectors, related to an incorrect size calculation.

The money_format function in PHP 5 before 5.2.4, and PHP 4 before 4.4.8, permits multiple (1) %i and (2) %n tokens, which has unknown impact and attack vectors, possibly related to a format string vulnerability.

The money_format function in PHP 5 before 5.2.4, and PHP 4 before 4.4. ...

Multiple integer overflows in PHP 4 before 4.4.8, and PHP 5 before 5.2 ...

The zend_alter_ini_entry function in PHP before 5.2.4 does not properl ...

Directory traversal vulnerability in PHP before 5.2.4 allows attackers ...

The chunk_split function in string.c in PHP 5.2.3 does not properly ca ...

Buffer overflow in the php_openssl_make_REQ function in PHP before 5.2 ...

Unspecified vulnerability in the chunk_split function in PHP before 5. ...