Логотип exploitDog
product: "php"
Консоль
Логотип exploitDog

exploitDog

product: "php"
PHP

PHPпопулярный язык сценариев общего назначения, особенно подходящий для веб-разработки.

Релизный цикл, информация об уязвимостях

Продукт: PHP
Вендор: php

График релизов

8.18.28.38.4202120222023202420252026202720282029

Недавние уязвимости PHP

Количество 3 867

nvd логотип

CVE-2006-1549

больше 19 лет назад

PHP 4.4.2 and 5.1.2 allows local users to cause a crash (segmentation fault) by defining and executing a recursive function. NOTE: it has been reported by a reliable third party that some later versions are also affected.

CVSS2: 2.1
EPSS: Низкий
debian логотип

CVE-2006-1549

больше 19 лет назад

PHP 4.4.2 and 5.1.2 allows local users to cause a crash (segmentation ...

CVSS2: 2.1
EPSS: Низкий
ubuntu логотип

CVE-2006-1549

больше 19 лет назад

PHP 4.4.2 and 5.1.2 allows local users to cause a crash (segmentation fault) by defining and executing a recursive function. NOTE: it has been reported by a reliable third party that some later versions are also affected.

CVSS2: 2.1
EPSS: Низкий
nvd логотип

CVE-2006-1494

больше 19 лет назад

Directory traversal vulnerability in file.c in PHP 4.4.2 and 5.1.2 allows local users to bypass open_basedir restrictions allows remote attackers to create files in arbitrary directories via the tempnam function.

CVSS2: 2.6
EPSS: Низкий
nvd логотип

CVE-2006-1608

больше 19 лет назад

The copy function in file.c in PHP 4.4.2 and 5.1.2 allows local users to bypass safe mode and read arbitrary files via a source argument containing a compress.zlib:// URI.

CVSS2: 2.1
EPSS: Низкий
debian логотип

CVE-2006-1608

больше 19 лет назад

The copy function in file.c in PHP 4.4.2 and 5.1.2 allows local users ...

CVSS2: 2.1
EPSS: Низкий
debian логотип

CVE-2006-1494

больше 19 лет назад

Directory traversal vulnerability in file.c in PHP 4.4.2 and 5.1.2 all ...

CVSS2: 2.6
EPSS: Низкий
ubuntu логотип

CVE-2006-1608

больше 19 лет назад

The copy function in file.c in PHP 4.4.2 and 5.1.2 allows local users to bypass safe mode and read arbitrary files via a source argument containing a compress.zlib:// URI.

CVSS2: 2.1
EPSS: Низкий
ubuntu логотип

CVE-2006-1494

больше 19 лет назад

Directory traversal vulnerability in file.c in PHP 4.4.2 and 5.1.2 allows local users to bypass open_basedir restrictions allows remote attackers to create files in arbitrary directories via the tempnam function.

CVSS2: 2.6
EPSS: Низкий
nvd логотип

CVE-2006-0996

больше 19 лет назад

Cross-site scripting (XSS) vulnerability in phpinfo (info.c) in PHP 5.1.2 and 4.4.2 allows remote attackers to inject arbitrary web script or HTML via long array variables, including (1) a large number of dimensions or (2) long values, which prevents HTML tags from being removed.

CVSS2: 4.3
EPSS: Средний

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
1
nvd логотип
CVE-2006-1549

PHP 4.4.2 and 5.1.2 allows local users to cause a crash (segmentation fault) by defining and executing a recursive function. NOTE: it has been reported by a reliable third party that some later versions are also affected.

CVSS2: 2.1
0%
Низкий
больше 19 лет назад
debian логотип
CVE-2006-1549

PHP 4.4.2 and 5.1.2 allows local users to cause a crash (segmentation ...

CVSS2: 2.1
0%
Низкий
больше 19 лет назад
ubuntu логотип
CVE-2006-1549

PHP 4.4.2 and 5.1.2 allows local users to cause a crash (segmentation fault) by defining and executing a recursive function. NOTE: it has been reported by a reliable third party that some later versions are also affected.

CVSS2: 2.1
0%
Низкий
больше 19 лет назад
nvd логотип
CVE-2006-1494

Directory traversal vulnerability in file.c in PHP 4.4.2 and 5.1.2 allows local users to bypass open_basedir restrictions allows remote attackers to create files in arbitrary directories via the tempnam function.

CVSS2: 2.6
6%
Низкий
больше 19 лет назад
nvd логотип
CVE-2006-1608

The copy function in file.c in PHP 4.4.2 and 5.1.2 allows local users to bypass safe mode and read arbitrary files via a source argument containing a compress.zlib:// URI.

CVSS2: 2.1
1%
Низкий
больше 19 лет назад
debian логотип
CVE-2006-1608

The copy function in file.c in PHP 4.4.2 and 5.1.2 allows local users ...

CVSS2: 2.1
1%
Низкий
больше 19 лет назад
debian логотип
CVE-2006-1494

Directory traversal vulnerability in file.c in PHP 4.4.2 and 5.1.2 all ...

CVSS2: 2.6
6%
Низкий
больше 19 лет назад
ubuntu логотип
CVE-2006-1608

The copy function in file.c in PHP 4.4.2 and 5.1.2 allows local users to bypass safe mode and read arbitrary files via a source argument containing a compress.zlib:// URI.

CVSS2: 2.1
1%
Низкий
больше 19 лет назад
ubuntu логотип
CVE-2006-1494

Directory traversal vulnerability in file.c in PHP 4.4.2 and 5.1.2 allows local users to bypass open_basedir restrictions allows remote attackers to create files in arbitrary directories via the tempnam function.

CVSS2: 2.6
6%
Низкий
больше 19 лет назад
nvd логотип
CVE-2006-0996

Cross-site scripting (XSS) vulnerability in phpinfo (info.c) in PHP 5.1.2 and 4.4.2 allows remote attackers to inject arbitrary web script or HTML via long array variables, including (1) a large number of dimensions or (2) long values, which prevents HTML tags from being removed.

CVSS2: 4.3
18%
Средний
больше 19 лет назад

Уязвимостей на страницу


Поделиться