Vulnerabilities > PHP > Low
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2006-09-12 | CVE-2006-4625 | Unspecified vulnerability in PHP PHP 4.x up to 4.4.4 and PHP 5 up to 5.1.6 allows local users to bypass certain Apache HTTP Server httpd.conf options, such as safe_mode and open_basedir, via the ini_restore function, which resets the values to their php.ini (Master Value) defaults. | 3.6 |
| 2006-08-31 | CVE-2006-4484 | Input Validation vulnerability in PHP Buffer overflow in the LWZReadByte_ function in ext/gd/libgd/gd_gif_in.c in the GD extension in PHP before 5.1.5 allows remote attackers to have an unknown impact via a GIF file with input_code_size greater than MAX_LWZ_BITS, which triggers an overflow when initializing the table array. | 2.6 |
| 2006-08-31 | CVE-2006-4486 | Numeric Errors vulnerability in PHP Integer overflow in memory allocation routines in PHP before 5.1.6, when running on a 64-bit system, allows context-dependent attackers to bypass the memory_limit restriction. | 2.6 |
| 2006-06-13 | CVE-2006-2660 | Unspecified vulnerability in PHP Buffer consumption vulnerability in the tempnam function in PHP 5.1.4 and 4.x before 4.4.3 allows local users to bypass restrictions and create PHP files with fixed names in other directories via a pathname argument longer than MAXPATHLEN, which prevents a unique string from being appended to the filename. | 2.1 |
| 2006-05-29 | CVE-2006-2563 | Unspecified vulnerability in PHP 4.4.2/5.1.4 The cURL library (libcurl) in PHP 4.4.2 and 5.1.4 allows attackers to bypass safe mode and read files via a file:// request containing null characters. | 2.1 |
| 2006-04-10 | CVE-2006-1549 | Resource Management Errors vulnerability in PHP 4.4.2/5.1.2 PHP 4.4.2 and 5.1.2 allows local users to cause a crash (segmentation fault) by defining and executing a recursive function. | 2.1 |
| 2006-04-10 | CVE-2006-1494 | Safe_Mode and Open_Basedir Restriction Bypass vulnerability in PHP Directory traversal vulnerability in file.c in PHP 4.4.2 and 5.1.2 allows local users to bypass open_basedir restrictions allows remote attackers to create files in arbitrary directories via the tempnam function. | 2.6 |
| 2006-04-10 | CVE-2006-1608 | Safe_Mode and Open_Basedir Restriction Bypass vulnerability in PHP The copy function in file.c in PHP 4.4.2 and 5.1.2 allows local users to bypass safe mode and read arbitrary files via a source argument containing a compress.zlib:// URI. | 2.1 |
| 2006-03-07 | CVE-2006-1014 | Security Bypass vulnerability in PHP Argument injection vulnerability in certain PHP 4.x and 5.x applications, when used with sendmail and when accepting remote input for the additional_parameters argument to the mb_send_mail function, allows context-dependent attackers to read and create arbitrary files by providing extra -C and -X arguments to sendmail. | 3.2 |
| 2006-01-13 | CVE-2006-0208 | Cross-Site Scripting vulnerability in PHP Multiple cross-site scripting (XSS) vulnerabilities in PHP 4.4.1 and 5.1.1, when display_errors and html_errors are on, allow remote attackers to inject arbitrary web script or HTML via inputs to PHP applications that are not filtered when they are included in the resulting error message. | 2.6 |