Vulnerabilities > PHP > PHP > 4.4.4

DATE CVE VULNERABILITY TITLE RISK
2007-03-14 CVE-2007-1460 Permissions, Privileges, and Access Controls vulnerability in PHP
The zip:// URL wrapper provided by the PECL zip extension in PHP before 4.4.7, and 5.2.0 and 5.2.1, does not implement safemode or open_basedir checks, which allows remote attackers to read ZIP archives located outside of the intended directories.
network
low complexity
php CWE-264
5.0
5.0
2007-03-12 CVE-2007-1413 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in PHP
Buffer overflow in the snmpget function in the snmp extension in PHP 5.2.3 and earlier, including PHP 4.4.6 and probably other PHP 4 versions, allows context-dependent attackers to execute arbitrary code via a long value in the third argument (object id).
network
low complexity
php CWE-119
7.5
7.5
2007-03-10 CVE-2007-1411 Local Buffer Overflow vulnerability in PHP MSSQL_Connect
Buffer overflow in PHP 4.4.6 and earlier, and unspecified PHP 5 versions, allows local and possibly remote attackers to execute arbitrary code via long server name arguments to the (1) mssql_connect and (2) mssql_pconnect functions.
network
php
6.8
6.8
2007-03-10 CVE-2007-1396 Unspecified vulnerability in PHP
The import_request_variables function in PHP 4.0.7 through 4.4.6, and 5.x before 5.2.2, when called without a prefix, does not prevent the (1) GET, (2) POST, (3) COOKIE, (4) FILES, (5) SERVER, (6) SESSION, and other superglobals from being overwritten, which allows remote attackers to spoof source IP address and Referer data, and have other unspecified impact.
network
php
6.8
6.8
2007-03-10 CVE-2007-1380 Unspecified vulnerability in PHP
The php_binary serialization handler in the session extension in PHP before 4.4.5, and 5.x before 5.2.1, allows context-dependent attackers to obtain sensitive information (memory contents) via a serialized variable entry with a large length value, which triggers a buffer over-read.
network
low complexity
php
5.0
5.0
2007-03-10 CVE-2007-1379 Unspecified vulnerability in PHP
The ovrimos_close function in the Ovrimos extension for PHP before 4.4.5 can trigger efree of an arbitrary address, which might allow context-dependent attackers to execute arbitrary code.
network
high complexity
php
5.1
5.1
2007-03-10 CVE-2007-1378 Unspecified vulnerability in PHP
The ovrimos_longreadlen function in the Ovrimos extension for PHP before 4.4.5 allows context-dependent attackers to write to arbitrary memory locations via the result_id and length arguments.
network
high complexity
php
5.1
5.1
2007-03-10 CVE-2007-1376 Unspecified vulnerability in PHP
The shmop functions in PHP before 4.4.5, and before 5.2.1 in the 5.x series, do not verify that their arguments correspond to a shmop resource, which allows context-dependent attackers to read and write arbitrary memory locations via arguments associated with an inappropriate resource, as demonstrated by a GD Image resource.
network
low complexity
php
7.5
7.5
2007-03-10 CVE-2007-1375 Integer Overflow vulnerability in PHP 5 Substr_Compare
Integer overflow in the substr_compare function in PHP 5.2.1 and earlier allows context-dependent attackers to read sensitive memory via a large value in the length argument, a different vulnerability than CVE-2006-1991.
network
low complexity
php
5.0
5.0
2007-03-06 CVE-2007-1287 Cross-Site Scripting vulnerability in PHP
A regression error in the phpinfo function in PHP 4.4.3 to 4.4.6, and PHP 6.0 in CVS, allows remote attackers to conduct cross-site scripting (XSS) attacks via GET, POST, or COOKIE array values, which are not escaped in the phpinfo output, as originally fixed for CVE-2005-3388.
network
php
4.3
4.3