PHP — популярный язык сценариев общего назначения, особенно подходящий для веб-разработки.
Релизный цикл, информация об уязвимостях
График релизов
Количество 3 883
CVE-2003-0442
Cross-site scripting (XSS) vulnerability in the transparent SID suppor ...
CVE-2003-1303
Buffer overflow in the imap_fetch_overview function in the IMAP functionality (php_imap.c) in PHP before 4.3.3 allows remote attackers to cause a denial of service (segmentation fault) and possibly execute arbitrary code via a long e-mail address in a (1) To or (2) From header.
CVE-2003-0442
Cross-site scripting (XSS) vulnerability in the transparent SID support capability for PHP before 4.3.2 (session.use_trans_sid) allows remote attackers to insert arbitrary script via the PHPSESSID parameter.
CVE-2003-0166
Integer signedness error in emalloc() function for PHP before 4.3.2 allow remote attackers to cause a denial of service (memory consumption) and possibly execute arbitrary code via negative arguments to functions such as (1) socket_recv, (2) socket_recvfrom, and possibly other functions.
CVE-2003-0172
Buffer overflow in openlog function for PHP 4.3.1 on Windows operating system, and possibly other OSes, allows remote attackers to cause a crash and possibly execute arbitrary code via a long filename argument.
CVE-2003-0172
Buffer overflow in openlog function for PHP 4.3.1 on Windows operating ...
CVE-2003-0166
Integer signedness error in emalloc() function for PHP before 4.3.2 al ...
CVE-2003-0097
Unknown vulnerability in CGI module for PHP 4.3.0 allows attackers to access arbitrary files as the PHP user, and possibly execute PHP code, by bypassing the CGI force redirect settings (cgi.force_redirect or --enable-force-cgi-redirect).
CVE-2003-0097
Unknown vulnerability in CGI module for PHP 4.3.0 allows attackers to ...
CVE-2003-1302
The IMAP functionality in PHP before 4.3.1 allows remote attackers to cause a denial of service via an e-mail message with a (1) To or (2) From header with an address that contains a large number of "\" (backslash) characters.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
| CVE-2003-0442 Cross-site scripting (XSS) vulnerability in the transparent SID suppor ... | CVSS2: 4.3 | 52% Средний | больше 22 лет назад |
 | CVE-2003-1303 Buffer overflow in the imap_fetch_overview function in the IMAP functionality (php_imap.c) in PHP before 4.3.3 allows remote attackers to cause a denial of service (segmentation fault) and possibly execute arbitrary code via a long e-mail address in a (1) To or (2) From header. | 1% Низкий | больше 22 лет назад | |
| CVE-2003-0442 Cross-site scripting (XSS) vulnerability in the transparent SID support capability for PHP before 4.3.2 (session.use_trans_sid) allows remote attackers to insert arbitrary script via the PHPSESSID parameter. | 52% Средний | больше 22 лет назад | |
 | CVE-2003-0166 Integer signedness error in emalloc() function for PHP before 4.3.2 allow remote attackers to cause a denial of service (memory consumption) and possibly execute arbitrary code via negative arguments to functions such as (1) socket_recv, (2) socket_recvfrom, and possibly other functions. | CVSS2: 7.5 | 27% Средний | почти 23 года назад |
| CVE-2003-0172 Buffer overflow in openlog function for PHP 4.3.1 on Windows operating system, and possibly other OSes, allows remote attackers to cause a crash and possibly execute arbitrary code via a long filename argument. | CVSS2: 7.5 | 22% Средний | почти 23 года назад |
| CVE-2003-0172 Buffer overflow in openlog function for PHP 4.3.1 on Windows operating ... | CVSS2: 7.5 | 22% Средний | почти 23 года назад |
| CVE-2003-0166 Integer signedness error in emalloc() function for PHP before 4.3.2 al ... | CVSS2: 7.5 | 27% Средний | почти 23 года назад |
| CVE-2003-0097 Unknown vulnerability in CGI module for PHP 4.3.0 allows attackers to access arbitrary files as the PHP user, and possibly execute PHP code, by bypassing the CGI force redirect settings (cgi.force_redirect or --enable-force-cgi-redirect). | CVSS2: 7.5 | 0% Низкий | почти 23 года назад |
| CVE-2003-0097 Unknown vulnerability in CGI module for PHP 4.3.0 allows attackers to ... | CVSS2: 7.5 | 0% Низкий | почти 23 года назад |
| CVE-2003-1302 The IMAP functionality in PHP before 4.3.1 allows remote attackers to cause a denial of service via an e-mail message with a (1) To or (2) From header with an address that contains a large number of "\" (backslash) characters. | 1% Низкий | около 23 лет назад |
Уязвимостей на страницу