Vulnerabilities > PHP > PHP > 5.1.2

DATE CVE VULNERABILITY TITLE RISK
2007-03-27 CVE-2007-1700 Unspecified vulnerability in PHP
The session extension in PHP 4 before 4.4.5, and PHP 5 before 5.2.1, calculates the reference count for the session variables without considering the internal pointer from the session globals, which allows context-dependent attackers to execute arbitrary code via a crafted string in the session_register after unsetting HTTP_SESSION_VARS and _SESSION, which destroys the session data Hashtable.
network
low complexity
php
7.5
7.5
2007-03-21 CVE-2007-1583 Unspecified vulnerability in PHP
The mb_parse_str function in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 sets the internal register_globals flag and does not disable it in certain cases when a script terminates, which allows remote attackers to invoke available PHP scripts with register_globals functionality that is not detectable by these scripts, as demonstrated by forcing a memory_limit violation.
network
php
6.8
6.8
2007-03-21 CVE-2007-1582 Unspecified vulnerability in PHP
The resource system in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 allows context-dependent attackers to execute arbitrary code by interrupting certain functions in the GD (ext/gd) extension and unspecified other extensions via a userspace error handler, which can be used to destroy and modify internal resources.
network
php
6.8
6.8
2007-03-21 CVE-2007-1581 Code Injection vulnerability in PHP
The resource system in PHP 5.0.0 through 5.2.1 allows context-dependent attackers to execute arbitrary code by interrupting the hash_update_file function via a userspace (1) error or (2) stream handler, which can then be used to destroy and modify internal resources.
network
php CWE-94
critical
 9.3
9.3
2007-03-20 CVE-2007-1521 Unspecified vulnerability in PHP
Double free vulnerability in PHP before 4.4.7, and 5.x before 5.2.2, allows context-dependent attackers to execute arbitrary code by interrupting the session_regenerate_id function, as demonstrated by calling a userspace error handler or triggering a memory limit violation.
network
php
6.8
6.8
2007-03-16 CVE-2007-1484 Unspecified vulnerability in PHP
The array_user_key_compare function in PHP 4.4.6 and earlier, and 5.x up to 5.2.1, makes erroneous calls to zval_dtor, which triggers memory corruption and allows local users to bypass safe_mode and execute arbitrary code via a certain unset operation after array_user_key_compare has been called.
local
low complexity
php
4.6
4.6
2007-03-14 CVE-2007-1461 Permissions, Privileges, and Access Controls vulnerability in PHP
The compress.bzip2:// URL wrapper provided by the bz2 extension in PHP before 4.4.7, and 5.x before 5.2.2, does not implement safemode or open_basedir checks, which allows remote attackers to read bzip2 archives located outside of the intended directories.
network
low complexity
php CWE-264
7.8
7.8
2007-03-14 CVE-2007-1452 Unspecified vulnerability in PHP
The FDF support (ext/fdf) in PHP 5.2.0 and earlier does not implement the input filtering hooks for ext/filter, which allows remote attackers to bypass web site filters via an application/vnd.fdf formatted POST.
network
low complexity
php
5.0
5.0
2007-03-12 CVE-2007-1413 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in PHP
Buffer overflow in the snmpget function in the snmp extension in PHP 5.2.3 and earlier, including PHP 4.4.6 and probably other PHP 4 versions, allows context-dependent attackers to execute arbitrary code via a long value in the third argument (object id).
network
low complexity
php CWE-119
7.5
7.5
2007-03-10 CVE-2007-1396 Unspecified vulnerability in PHP
The import_request_variables function in PHP 4.0.7 through 4.4.6, and 5.x before 5.2.2, when called without a prefix, does not prevent the (1) GET, (2) POST, (3) COOKIE, (4) FILES, (5) SERVER, (6) SESSION, and other superglobals from being overwritten, which allows remote attackers to spoof source IP address and Referer data, and have other unspecified impact.
network
php
6.8
6.8