Vulnerabilities > PHP > PHP > 4.4.9

DATE CVE VULNERABILITY TITLE RISK
2004-11-03 CVE-2004-0959 Unspecified vulnerability in PHP
rfc1867.c in PHP before 5.0.2 allows local users to upload files to arbitrary locations via a PHP script with a certain MIME header that causes the "$_FILES" array to be modified.
local
low complexity
php
2.1
2004-11-03 CVE-2004-0958 Unspecified vulnerability in PHP
php_variables.c in PHP before 5.0.2 allows remote attackers to read sensitive memory contents via (1) GET, (2) POST, or (3) COOKIE GPC variables that end in an open bracket character, which causes PHP to calculate an incorrect string length.
network
low complexity
php
5.0