Vulnerabilities > PHP > PHP > 5.2.0

DATE CVE VULNERABILITY TITLE RISK
2007-03-14 CVE-2007-1460 Permissions, Privileges, and Access Controls vulnerability in PHP
The zip:// URL wrapper provided by the PECL zip extension in PHP before 4.4.7, and 5.2.0 and 5.2.1, does not implement safemode or open_basedir checks, which allows remote attackers to read ZIP archives located outside of the intended directories.
network
low complexity
php CWE-264
5.0
5.0
2007-03-14 CVE-2007-1454 Unspecified vulnerability in PHP 5.2.0
ext/filter in PHP 5.2.0, when FILTER_SANITIZE_STRING is used with the FILTER_FLAG_STRIP_LOW flag, does not properly strip HTML tags, which allows remote attackers to conduct cross-site scripting (XSS) attacks via HTML with a '<' character followed by certain whitespace characters, which passes one filter but is collapsed into a valid tag, as demonstrated using %0b.
network
php
4.3
4.3
2007-03-14 CVE-2007-1453 Remote Buffer Overflow vulnerability in PHP 5.2.0
Buffer underflow in the PHP_FILTER_TRIM_DEFAULT macro in the filtering extension (ext/filter) in PHP 5.2.0 allows context-dependent attackers to execute arbitrary code by calling filter_var with certain modes such as FILTER_VALIDATE_INT, which causes filter to write a null byte in whitespace that precedes the buffer.
network
low complexity
php
7.5
7.5
2007-03-14 CVE-2007-1452 Unspecified vulnerability in PHP
The FDF support (ext/fdf) in PHP 5.2.0 and earlier does not implement the input filtering hooks for ext/filter, which allows remote attackers to bypass web site filters via an application/vnd.fdf formatted POST.
network
low complexity
php
5.0
5.0
2007-03-12 CVE-2007-1413 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in PHP
Buffer overflow in the snmpget function in the snmp extension in PHP 5.2.3 and earlier, including PHP 4.4.6 and probably other PHP 4 versions, allows context-dependent attackers to execute arbitrary code via a long value in the third argument (object id).
network
low complexity
php CWE-119
7.5
7.5
2007-03-10 CVE-2007-1399 Stack Buffer Overflow vulnerability in PHP Zip URL Wrapper
Stack-based buffer overflow in the zip:// URL wrapper in PECL ZIP 1.8.3 and earlier, as bundled with PHP 5.2.0 and 5.2.1, allows remote attackers to execute arbitrary code via a long zip:// URL, as demonstrated by actively triggering URL access from a remote PHP interpreter via avatar upload or blog pingback.
network
low complexity
pecl-zip php
critical
 10.0
10
2007-03-10 CVE-2007-1396 Unspecified vulnerability in PHP
The import_request_variables function in PHP 4.0.7 through 4.4.6, and 5.x before 5.2.2, when called without a prefix, does not prevent the (1) GET, (2) POST, (3) COOKIE, (4) FILES, (5) SERVER, (6) SESSION, and other superglobals from being overwritten, which allows remote attackers to spoof source IP address and Referer data, and have other unspecified impact.
network
php
6.8
6.8
2007-03-10 CVE-2007-1380 Unspecified vulnerability in PHP
The php_binary serialization handler in the session extension in PHP before 4.4.5, and 5.x before 5.2.1, allows context-dependent attackers to obtain sensitive information (memory contents) via a serialized variable entry with a large length value, which triggers a buffer over-read.
network
low complexity
php
5.0
5.0
2007-03-10 CVE-2007-1376 Unspecified vulnerability in PHP
The shmop functions in PHP before 4.4.5, and before 5.2.1 in the 5.x series, do not verify that their arguments correspond to a shmop resource, which allows context-dependent attackers to read and write arbitrary memory locations via arguments associated with an inappropriate resource, as demonstrated by a GD Image resource.
network
low complexity
php
7.5
7.5
2007-03-10 CVE-2007-1375 Integer Overflow vulnerability in PHP 5 Substr_Compare
Integer overflow in the substr_compare function in PHP 5.2.1 and earlier allows context-dependent attackers to read sensitive memory via a large value in the length argument, a different vulnerability than CVE-2006-1991.
network
low complexity
php
5.0
5.0