PHP — популярный язык сценариев общего назначения, особенно подходящий для веб-разработки.
Релизный цикл, информация об уязвимостях
График релизов
Количество 4 082
CVE-2003-1302
The IMAP functionality in PHP before 4.3.1 allows remote attackers to ...
CVE-2003-0249
PHP treats unknown methods such as "PoSt" as a GET request, which coul ...
CVE-2003-0860
Buffer overflows in PHP before 4.3.3 have unknown impact and unknown attack vectors.
CVE-2003-0863
The php_check_safe_mode_include_dir function in fopen_wrappers.c of PHP 4.3.x returns a success value (0) when the safe_mode_include_dir variable is not specified in configuration, which differs from the previous failure value and may allow remote attackers to exploit file include vulnerabilities in PHP applications.
CVE-2003-0861
Integer overflows in (1) base64_encode and (2) the GD library for PHP before 4.3.3 have unknown impact and unknown attack vectors.
CVE-2003-0860
Buffer overflows in PHP before 4.3.3 have unknown impact and unknown a ...
CVE-2003-0861
Integer overflows in (1) base64_encode and (2) the GD library for PHP ...
CVE-2003-0863
The php_check_safe_mode_include_dir function in fopen_wrappers.c of PH ...
CVE-2003-0442
Cross-site scripting (XSS) vulnerability in the transparent SID support capability for PHP before 4.3.2 (session.use_trans_sid) allows remote attackers to insert arbitrary script via the PHPSESSID parameter.
CVE-2003-0442
Cross-site scripting (XSS) vulnerability in the transparent SID suppor ...
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
| CVE-2003-1302 The IMAP functionality in PHP before 4.3.1 allows remote attackers to ... | CVSS2: 5 | 1% Низкий | почти 23 года назад |
| CVE-2003-0249 PHP treats unknown methods such as "PoSt" as a GET request, which coul ... | CVSS2: 7.5 | 1% Низкий | почти 23 года назад |
 | CVE-2003-0860 Buffer overflows in PHP before 4.3.3 have unknown impact and unknown attack vectors. | CVSS2: 10 | 2% Низкий | почти 23 года назад |
| CVE-2003-0863 The php_check_safe_mode_include_dir function in fopen_wrappers.c of PHP 4.3.x returns a success value (0) when the safe_mode_include_dir variable is not specified in configuration, which differs from the previous failure value and may allow remote attackers to exploit file include vulnerabilities in PHP applications. | CVSS2: 7.5 | 7% Низкий | почти 23 года назад |
| CVE-2003-0861 Integer overflows in (1) base64_encode and (2) the GD library for PHP before 4.3.3 have unknown impact and unknown attack vectors. | CVSS2: 10 | 2% Низкий | почти 23 года назад |
| CVE-2003-0860 Buffer overflows in PHP before 4.3.3 have unknown impact and unknown a ... | CVSS2: 10 | 2% Низкий | почти 23 года назад |
| CVE-2003-0861 Integer overflows in (1) base64_encode and (2) the GD library for PHP ... | CVSS2: 10 | 2% Низкий | почти 23 года назад |
| CVE-2003-0863 The php_check_safe_mode_include_dir function in fopen_wrappers.c of PH ... | CVSS2: 7.5 | 7% Низкий | почти 23 года назад |
| CVE-2003-0442 Cross-site scripting (XSS) vulnerability in the transparent SID support capability for PHP before 4.3.2 (session.use_trans_sid) allows remote attackers to insert arbitrary script via the PHPSESSID parameter. | CVSS2: 4.3 | 7% Низкий | больше 23 лет назад |
| CVE-2003-0442 Cross-site scripting (XSS) vulnerability in the transparent SID suppor ... | CVSS2: 4.3 | 7% Низкий | больше 23 лет назад |
Уязвимостей на страницу