← Back

Php

php

770 CVEs • 25 products

Products (25)

Click to collapse
Toggle
Php
php
737 CVEs
Pear
pear
5 CVEs
Archive Tar
archive_tar
4 CVEs
Php Script Index
php_script_index
2 CVEs
Pearweb
pearweb
2 CVEs
Frankenphp
frankenphp
2 CVEs
Phpsquidpass
phpsquidpass
1 CVE
Xml Rpc
xml_rpc
1 CVE
Directory Listing Script
directory_listing_script
1 CVE
Animated Smiley Generator
animated_smiley_generator
1 CVE
Errordocs
errordocs
1 CVE
Blog Cms
blog_cms
1 CVE
Ar Memberscript
ar_memberscript
1 CVE
Bloq
bloq
1 CVE
Com Extensions
com_extensions
1 CVE
Mysql Extension
mysql_extension
1 CVE
Mysql Banner Exchange
mysql_banner_exchange
1 CVE
F1 Maxs File Uploader
f1_maxs_file_uploader
1 CVE
Xhprof
xhprof
1 CVE
Pecl Http
pecl_http
1 CVE
Pear Archive Tar
pear_archive_tar
1 CVE
Imagick
imagick
1 CVE
Ext Http
ext-http
1 CVE
Memcached
memcached
1 CVE
Php Fi
php_fi
1 CVE

CVEs (770)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2001-1246
1Php
1Php
Apr 16, 2026
Jun 30, 2001
N/A· v4
N/A· v3
7.5 HIGH· v2
PHP 4.0.5 through 4.1.0 in safe mode does not properly cleanse the 5th parameter to the mail() function, which allows local users and possibly remote attackers to execute arbitrary commands via shell metacharacters.
CVE-2001-0108
2Mandrakesoft
Php
2Mandrake Linux
Php
Apr 16, 2026
Mar 12, 2001
N/A· v4
N/A· v3
5.0 MEDIUM· v2
PHP Apache module 4.0.4 and earlier allows remote attackers to bypass .htaccess access restrictions via a malformed HTTP request on an unrestricted page that causes PHP to use those access controls on the next page that...Show more
PHP Apache module 4.0.4 and earlier allows remote attackers to bypass .htaccess access restrictions via a malformed HTTP request on an unrestricted page that causes PHP to use those access controls on the next page that is requested.Show less
CVE-2001-1385
2Mandrakesoft
Php
2Mandrake Linux
Php
Apr 16, 2026
Jan 12, 2001
N/A· v4
N/A· v3
5.0 MEDIUM· v2
The Apache module for PHP 4.0.0 through PHP 4.0.4, when disabled with the 'engine = off' option for a virtual host, may disable PHP for other virtual hosts, which could cause Apache to serve the source code of PHP script...Show more
The Apache module for PHP 4.0.0 through PHP 4.0.4, when disabled with the 'engine = off' option for a virtual host, may disable PHP for other virtual hosts, which could cause Apache to serve the source code of PHP scripts.Show less
CVE-2000-0967
1Php
1Php
Sep 23, 2026
Dec 19, 2000
N/A· v4
N/A· v3
10.0 HIGH· v2
PHP 3 and 4 do not properly cleanse user-injected format strings, which allows remote attackers to execute arbitrary commands by triggering error messages that are improperly written to the error logs.
CVE-2000-0860
1Php
1Php
Apr 16, 2026
Nov 14, 2000
N/A· v4
N/A· v3
5.0 MEDIUM· v2
The file upload capability in PHP versions 3 and 4 allows remote attackers to read arbitrary files by setting hidden form fields whose names match the names of internal PHP script variables.
CVE-2000-0059
1Php
1Php
Apr 16, 2026
Jan 4, 2000
N/A· v4
N/A· v3
10.0 HIGH· v2
PHP3 with safe_mode enabled does not properly filter shell metacharacters from commands that are executed by popen, which could allow remote attackers to execute commands.
CVE-1999-0068
1Php
1Php
Apr 16, 2026
Oct 19, 1997
N/A· v4
N/A· v3
7.5 HIGH· v2
CGI PHP mylog script allows an attacker to read any file on the target server.
CVE-1999-0346
1Php
1Php Fi
Apr 16, 2026
Oct 16, 1997
N/A· v4
N/A· v3
5.0 MEDIUM· v2
CGI PHP mlog script allows an attacker to read any file on the target server.
CVE-1999-0238
1Php
1Php
Apr 16, 2026
Aug 1, 1997
N/A· v4
N/A· v3
10.0 HIGH· v2
php.cgi allows attackers to read any file on the system.
CVE-1999-0058
1Php
1Php
Apr 16, 2026
Apr 17, 1997
N/A· v4
N/A· v3
7.5 HIGH· v2
Buffer overflow in PHP cgi program, php.cgi allows shell access.