PHP — популярный язык сценариев общего назначения, особенно подходящий для веб-разработки.

Unspecified vulnerability in PHP before 5.2.1 allows attackers to "clobber" certain super-global variables via unspecified vectors.

The zend_hash_init function in PHP 5 before 5.2.1 and PHP 4 before 4.4.5, when running on a 64-bit platform, allows context-dependent attackers to cause a denial of service (infinite loop) by unserializing certain integer expressions, which only cause 32-bit arguments to be used after the check for a negative value, as demonstrated by an "a:2147483649:{" argument.

The WDDX deserializer in the wddx extension in PHP 5 before 5.2.1 and PHP 4 before 4.4.5 does not properly initialize the key_length variable for a numerical key, which allows context-dependent attackers to read stack memory via a wddxPacket element that contains a variable with a string name before a numerical variable.

Multiple buffer overflows in PHP before 5.2.1 allow attackers to cause ...

Multiple format string vulnerabilities in PHP before 5.2.1 might allow ...

Unspecified vulnerability in PHP before 5.2.1 allows attackers to "clo ...

PHP before 5.2.1 allows attackers to bypass safe_mode and open_basedir ...

Buffer underflow in PHP before 5.2.1 allows attackers to cause a denia ...

The WDDX deserializer in the wddx extension in PHP 5 before 5.2.1 and ...

Off-by-one error in the str_ireplace function in PHP 5.2.1 might allow ...