5.2.9 * * * : Security Vulnerabilities

Cpe Name:cpe:2.3:a:php:php:5.2.9:*:*:*:*:*:*:*

CVSS Scores Greater Than: 0 1 2 3 4 5 6 7 8 9

Sort Results By : CVE Number Descending CVE Number Ascending CVSS Score Descending Number Of Exploits Descending

#	CVE ID	CWE ID	# of Exploits	Vulnerability Type(s)	Publish Date	Update Date	Score	Gained Access Level	Access	Complexity	Authentication	Conf.	Integ.	Avail.
1	CVE-2016-7478			DoS	2017-01-11	2018-01-14	5.0	None	Remote	Low	Not required	None	None	Partial
Zend/zend_exceptions.c in PHP, possibly 5.x before 5.6.28 and 7.x before 7.0.13, allows remote attackers to cause a denial of service (infinite loop) via a crafted Exception object in serialized data, a related issue to CVE-2015-8876.
2	CVE-2015-8994	264		+Priv	2017-03-02	2017-03-16	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
An issue was discovered in PHP 5.x and 7.x, when the configuration uses apache2handler/mod_php or php-fpm with OpCache enabled. With 5.x after 5.6.28 or 7.x after 7.0.13, the issue is resolved in a non-default configuration with the opcache.validate_permission=1 setting. The vulnerability details are as follows. In PHP SAPIs where PHP interpreters share a common parent process, Zend OpCache creates a shared memory object owned by the common parent during initialization. Child PHP processes inherit the SHM descriptor, using it to cache and retrieve compiled script bytecode ("opcode" in PHP jargon). Cache keys vary depending on configuration, but filename is a central key component, and compiled opcode can generally be run if a script's filename is known or can be guessed. Many common shared-hosting configurations change EUID in child processes to enforce privilege separation among hosted users (for example using mod_ruid2 for the Apache HTTP Server, or php-fpm user settings). In these scenarios, the default Zend OpCache behavior defeats script file permissions by sharing a single SHM cache among all child PHP processes. PHP scripts often contain sensitive information: Think of CMS configurations where reading or running another user's script usually means gaining privileges to the CMS database.
3	CVE-2014-9427	119		Exec Code Overflow +Info	2015-01-03	2016-12-31	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
sapi/cgi/cgi_main.c in the CGI component in PHP through 5.4.36, 5.5.x through 5.5.20, and 5.6.x through 5.6.4, when mmap is used to read a .php file, does not properly consider the mapping's length during processing of an invalid file that begins with a # character and lacks a newline character, which causes an out-of-bounds read and might (1) allow remote attackers to obtain sensitive information from php-cgi process memory by leveraging the ability to upload a .php file or (2) trigger unexpected code execution if a valid PHP script is present in memory locations adjacent to the mapping.
4	CVE-2014-2497	399		DoS	2014-03-21	2017-01-07	4.3	None	Remote	Medium	Not required	None	None	Partial
The gdImageCreateFromXpm function in gdxpm.c in libgd, as used in PHP 5.4.26 and earlier, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted color table in an XPM file.
5	CVE-2014-0238	119		DoS Overflow	2014-06-01	2017-01-07	5.0	None	Remote	Low	Not required	None	None	Partial
The cdf_read_property_info function in cdf.c in the Fileinfo component in PHP before 5.4.29 and 5.5.x before 5.5.13 allows remote attackers to cause a denial of service (infinite loop or out-of-bounds memory access) via a vector that (1) has zero length or (2) is too long.
6	CVE-2014-0237	399		DoS	2014-06-01	2017-01-07	5.0	None	Remote	Low	Not required	None	None	Partial
The cdf_unpack_summary_info function in cdf.c in the Fileinfo component in PHP before 5.4.29 and 5.5.x before 5.5.13 allows remote attackers to cause a denial of service (performance degradation) by triggering many file_printf calls.
7	CVE-2013-4635	189		DoS Overflow	2013-06-21	2013-09-12	5.0	None	Remote	Low	Not required	None	None	Partial
Integer overflow in the SdnToJewish function in jewish.c in the Calendar component in PHP before 5.3.26 and 5.4.x before 5.4.16 allows context-dependent attackers to cause a denial of service (application hang) via a large argument to the jdtojewish function.
8	CVE-2013-4248	20			2013-08-18	2016-11-28	4.3	None	Remote	Medium	Not required	None	Partial	None
The openssl_x509_parse function in openssl.c in the OpenSSL module in PHP before 5.4.18 and 5.5.x before 5.5.2 does not properly handle a '\0' character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.
9	CVE-2013-2110	119		DoS Overflow	2013-06-21	2016-12-31	5.0	None	Remote	Low	Not required	None	None	Partial
Heap-based buffer overflow in the php_quot_print_encode function in ext/standard/quot_print.c in PHP before 5.3.26 and 5.4.x before 5.4.16 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted argument to the quoted_printable_encode function.
10	CVE-2013-1643	200		+Info	2013-03-06	2014-01-28	5.0	None	Remote	Low	Not required	Partial	None	None
The SOAP parser in PHP before 5.3.23 and 5.4.x before 5.4.13 allows remote attackers to read arbitrary files via a SOAP WSDL file containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue in the soap_xmlParseFile and soap_xmlParseMemory functions. NOTE: this vulnerability exists because of an incorrect fix for CVE-2013-1824.
11	CVE-2013-1635	264		Bypass	2013-03-06	2014-01-28	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
ext/soap/soap.c in PHP before 5.3.22 and 5.4.x before 5.4.13 does not validate the relationship between the soap.wsdl_cache_dir directive and the open_basedir directive, which allows remote attackers to bypass intended access restrictions by triggering the creation of cached SOAP WSDL files in an arbitrary directory.
12	CVE-2012-3365	264		Bypass	2012-07-20	2017-12-01	5.0	None	Remote	Low	Not required	None	Partial	None
The SQLite functionality in PHP before 5.3.15 allows remote attackers to bypass the open_basedir protection mechanism via unspecified vectors.
13	CVE-2012-2688			Overflow	2012-07-20	2017-12-22	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
Unspecified vulnerability in the _php_stream_scandir function in the stream implementation in PHP before 5.3.15 and 5.4.x before 5.4.5 has unknown impact and remote attack vectors, related to an "overflow."
14	CVE-2012-2386	189		DoS Exec Code Overflow	2012-07-07	2012-09-22	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Integer overflow in the phar_parse_tarfile function in tar.c in the phar extension in PHP before 5.3.14 and 5.4.x before 5.4.4 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted tar file that triggers a heap-based buffer overflow.
15	CVE-2012-2336	20		DoS	2012-05-11	2018-01-05	5.0	None	Remote	Low	Not required	None	None	Partial
sapi/cgi/cgi_main.c in PHP before 5.3.13 and 5.4.x before 5.4.3, when configured as a CGI script (aka php-cgi), does not properly handle query strings that lack an = (equals sign) character, which allows remote attackers to cause a denial of service (resource consumption) by placing command-line options in the query string, related to lack of skipping a certain php_getopt for the 'T' case. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-1823.
16	CVE-2012-2311	89		Exec Code Sql	2012-05-11	2018-01-18	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
sapi/cgi/cgi_main.c in PHP before 5.3.13 and 5.4.x before 5.4.3, when configured as a CGI script (aka php-cgi), does not properly handle query strings that contain a %3D sequence but no = (equals sign) character, which allows remote attackers to execute arbitrary code by placing command-line options in the query string, related to lack of skipping a certain php_getopt for the 'd' case. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-1823.
17	CVE-2012-2143	310			2012-07-05	2016-12-08	4.3	None	Remote	Medium	Not required	None	Partial	None
The crypt_des (aka DES-based crypt) function in FreeBSD before 9.0-RELEASE-p2, as used in PHP, PostgreSQL, and other products, does not process the complete cleartext password if this password contains a 0x80 character, which makes it easier for context-dependent attackers to obtain access via an authentication attempt with an initial substring of the intended password, as demonstrated by a Unicode password.
18	CVE-2012-1823	20		Exec Code	2012-05-11	2018-01-18	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does not properly handle query strings that lack an = (equals sign) character, which allows remote attackers to execute arbitrary code by placing command-line options in the query string, related to lack of skipping a certain php_getopt for the 'd' case.
19	CVE-2012-1172	20		DoS Dir. Trav.	2012-05-24	2018-01-18	5.8	None	Remote	Medium	Not required	None	Partial	Partial
The file-upload implementation in rfc1867.c in PHP before 5.4.0 does not properly handle invalid [ (open square bracket) characters in name values, which makes it easier for remote attackers to cause a denial of service (malformed $_FILES indexes) or conduct directory traversal attacks during multi-file uploads by leveraging a script that lacks its own filename restrictions.
20	CVE-2012-1171	200		Bypass +Info	2014-02-15	2014-02-18	5.0	None	Remote	Low	Not required	Partial	None	None
The libxml RSHUTDOWN function in PHP 5.x allows remote attackers to bypass the open_basedir protection mechanism and read arbitrary files via vectors involving a stream_close method call during use of a custom stream wrapper.
21	CVE-2012-0831	20		Sql	2012-02-10	2018-01-18	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
PHP before 5.3.10 does not properly perform a temporary change to the magic_quotes_gpc directive during the importing of environment variables, which makes it easier for remote attackers to conduct SQL injection attacks via a crafted request, related to main/php_variables.c, sapi/cgi/cgi_main.c, and sapi/fpm/fpm/fpm_main.c.
22	CVE-2012-0789	399		DoS	2012-02-14	2018-01-09	5.0	None	Remote	Low	Not required	None	None	Partial
Memory leak in the timezone functionality in PHP before 5.3.9 allows remote attackers to cause a denial of service (memory consumption) by triggering many strtotime function calls, which are not properly handled by the php_date_parse_tzfile cache.
23	CVE-2012-0788	20		DoS	2012-02-14	2018-01-09	5.0	None	Remote	Low	Not required	None	None	Partial
The PDORow implementation in PHP before 5.3.9 does not properly interact with the session feature, which allows remote attackers to cause a denial of service (application crash) via a crafted application that uses a PDO driver for a fetch and then calls the session_start function, as demonstrated by a crash of the Apache HTTP Server.
24	CVE-2012-0057	264			2012-02-02	2018-01-18	6.4	None	Remote	Low	Not required	Partial	Partial	None
PHP before 5.3.9 has improper libxslt security settings, which allows remote attackers to create arbitrary files via a crafted XSLT stylesheet that uses the libxslt output extension.
25	CVE-2011-4885	20	2	DoS	2011-12-30	2018-01-09	5.0	None	Remote	Low	Not required	None	None	Partial
PHP before 5.3.9 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters.
26	CVE-2011-4718	264			2013-08-13	2013-08-13	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
Session fixation vulnerability in the Sessions subsystem in PHP before 5.5.2 allows remote attackers to hijack web sessions by specifying a session ID.
27	CVE-2011-3268	119		Overflow	2011-08-25	2017-08-29	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
Buffer overflow in the crypt function in PHP before 5.3.7 allows context-dependent attackers to have an unspecified impact via a long salt argument, a different vulnerability than CVE-2011-2483.
28	CVE-2011-3267	399		DoS	2011-08-25	2017-08-29	5.0	None	Remote	Low	Not required	None	None	Partial
PHP before 5.3.7 does not properly implement the error_log function, which allows context-dependent attackers to cause a denial of service (application crash) via unspecified vectors.
29	CVE-2011-3182			DoS Overflow	2011-08-25	2017-08-29	5.0	None	Remote	Low	Not required	None	None	Partial
PHP before 5.3.7 does not properly check the return values of the malloc, calloc, and realloc library functions, which allows context-dependent attackers to cause a denial of service (NULL pointer dereference and application crash) or trigger a buffer overflow by leveraging the ability to provide an arbitrary value for a function argument, related to (1) ext/curl/interface.c, (2) ext/date/lib/parse_date.c, (3) ext/date/lib/parse_iso_intervals.c, (4) ext/date/lib/parse_tz.c, (5) ext/date/lib/timelib.c, (6) ext/pdo_odbc/pdo_odbc.c, (7) ext/reflection/php_reflection.c, (8) ext/soap/php_sdl.c, (9) ext/xmlrpc/libxmlrpc/base64.c, (10) TSRM/tsrm_win32.c, and (11) the strtotime function.
30	CVE-2011-2483	310			2011-08-25	2017-08-29	5.0	None	Remote	Low	Not required	Partial	None	None
crypt_blowfish before 1.1, as used in PHP before 5.3.7 on certain platforms, PostgreSQL before 8.4.9, and other products, does not properly handle 8-bit characters, which makes it easier for context-dependent attackers to determine a cleartext password by leveraging knowledge of a password hash.
31	CVE-2011-1470	20		DoS	2011-03-20	2018-10-30	4.3	None	Remote	Medium	Not required	None	None	Partial
The Zip extension in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (application crash) via a ziparchive stream that is not properly handled by the stream_get_contents function.
32	CVE-2011-1469			DoS	2011-03-20	2018-10-30	4.3	None	Remote	Medium	Not required	None	None	Partial
Unspecified vulnerability in the Streams component in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (application crash) by accessing an ftp:// URL during use of an HTTP proxy with the FTP wrapper.
33	CVE-2011-1468	399		DoS	2011-03-20	2018-10-30	4.3	None	Remote	Medium	Not required	None	None	Partial
Multiple memory leaks in the OpenSSL extension in PHP before 5.3.6 might allow remote attackers to cause a denial of service (memory consumption) via (1) plaintext data to the openssl_encrypt function or (2) ciphertext data to the openssl_decrypt function.
34	CVE-2011-1467			DoS	2011-03-20	2018-10-30	5.0	None	Remote	Low	Not required	None	None	Partial
Unspecified vulnerability in the NumberFormatter::setSymbol (aka numfmt_set_symbol) function in the Intl extension in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (application crash) via an invalid argument, a related issue to CVE-2010-4409.
35	CVE-2011-1466	189		DoS Overflow	2011-03-20	2018-10-30	5.0	None	Remote	Low	Not required	None	None	Partial
Integer overflow in the SdnToJulian function in the Calendar extension in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (application crash) via a large integer in the first argument to the cal_from_jd function.
36	CVE-2011-1464	119		DoS Overflow	2011-03-20	2018-10-30	4.3	None	Remote	Medium	Not required	None	None	Partial
Buffer overflow in the strval function in PHP before 5.3.6, when the precision configuration option has a large value, might allow context-dependent attackers to cause a denial of service (application crash) via a small numerical value in the argument.
37	CVE-2011-1153	134		DoS Exec Code Mem. Corr. +Info	2011-03-16	2017-08-17	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Multiple format string vulnerabilities in phar_object.c in the phar extension in PHP 5.3.5 and earlier allow context-dependent attackers to obtain sensitive information from process memory, cause a denial of service (memory corruption), or possibly execute arbitrary code via format string specifiers in an argument to a class method, leading to an incorrect zend_throw_exception_ex call.
38	CVE-2011-1092	189	1	DoS Overflow	2011-03-15	2018-10-30	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Integer overflow in ext/shmop/shmop.c in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (crash) and possibly read sensitive memory via a large third argument to the shmop_read function.
39	CVE-2011-0755	189		Overflow	2011-02-02	2018-10-30	5.0	None	Remote	Low	Not required	None	Partial	None
Integer overflow in the mt_rand function in PHP before 5.3.4 might make it easier for context-dependent attackers to predict the return values by leveraging a script's use of a large max parameter, as demonstrated by a value that exceeds mt_getrandmax.
40	CVE-2011-0752	20		Bypass	2011-02-02	2018-10-30	5.0	None	Remote	Low	Not required	None	Partial	None
The extract function in PHP before 5.2.15 does not prevent use of the EXTR_OVERWRITE parameter to overwrite (1) the GLOBALS superglobal array and (2) the this variable, which allows context-dependent attackers to bypass intended access restrictions by modifying data structures that were not intended to depend on external input, a related issue to CVE-2005-2691 and CVE-2006-3758.
41	CVE-2011-0708	119	1	DoS Overflow	2011-03-20	2018-10-30	4.3	None	Remote	Medium	Not required	None	None	Partial
exif.c in the Exif extension in PHP before 5.3.6 on 64-bit platforms performs an incorrect cast, which allows remote attackers to cause a denial of service (application crash) via an image with a crafted Image File Directory (IFD) that triggers a buffer over-read.
42	CVE-2011-0421		1	DoS	2011-03-20	2018-10-30	4.3	None	Remote	Medium	Not required	None	None	Partial
The _zip_name_locate function in zip_name_locate.c in the Zip extension in PHP before 5.3.6 does not properly handle a ZIPARCHIVE::FL_UNCHANGED argument, which might allow context-dependent attackers to cause a denial of service (NULL pointer dereference) via an empty ZIP archive that is processed with a (1) locateName or (2) statName operation.
43	CVE-2010-4699	189		Bypass	2011-01-18	2018-10-30	5.0	None	Remote	Low	Not required	None	Partial	None
The iconv_mime_decode_headers function in the Iconv extension in PHP before 5.3.4 does not properly handle encodings that are unrecognized by the iconv and mbstring (aka Multibyte String) implementations, which allows remote attackers to trigger an incomplete output array, and possibly bypass spam detection or have unspecified other impact, via a crafted Subject header in an e-mail message, as demonstrated by the ks_c_5601-1987 character set.
44	CVE-2010-4697	399		DoS Mem. Corr.	2011-01-18	2018-10-30	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
Use-after-free vulnerability in the Zend engine in PHP before 5.2.15 and 5.3.x before 5.3.4 might allow context-dependent attackers to cause a denial of service (heap memory corruption) or have unspecified other impact via vectors related to use of __set, __get, __isset, and __unset methods on objects accessed by a reference.
45	CVE-2010-4645	189		DoS	2011-01-11	2017-08-17	5.0	None	Remote	Low	Not required	None	None	Partial
strtod.c, as used in the zend_strtod function in PHP 5.2 before 5.2.17 and 5.3 before 5.3.5, and other products, allows context-dependent attackers to cause a denial of service (infinite loop) via a certain floating-point value in scientific notation, which is not properly handled in x87 FPU registers, as demonstrated using 2.2250738585072011e-308.
46	CVE-2010-3870	20		Sql XSS Bypass	2010-11-12	2018-10-30	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
The utf8_decode function in PHP before 5.3.4 does not properly handle non-shortest form UTF-8 encoding and ill-formed subsequences in UTF-8 data, which makes it easier for remote attackers to bypass cross-site scripting (XSS) and SQL injection protection mechanisms via a crafted string.
47	CVE-2010-3710	399		DoS	2010-10-25	2016-08-23	4.3	None	Remote	Medium	Not required	None	None	Partial
Stack consumption vulnerability in the filter_var function in PHP 5.2.x through 5.2.14 and 5.3.x through 5.3.3, when FILTER_VALIDATE_EMAIL mode is used, allows remote attackers to cause a denial of service (memory consumption and application crash) via a long e-mail address string.
48	CVE-2010-3709	20	1	DoS	2010-11-09	2016-08-23	4.3	None	Remote	Medium	Not required	None	None	Partial
The ZipArchive::getArchiveComment function in PHP 5.2.x through 5.2.14 and 5.3.x through 5.3.3 allows context-dependent attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted ZIP archive.
49	CVE-2010-3065	264			2010-08-20	2010-12-10	5.0	None	Remote	Low	Not required	None	Partial	None
The default session serializer in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 does not properly handle the PS_UNDEF_MARKER marker, which allows context-dependent attackers to modify arbitrary session variables via a crafted session variable name.
50	CVE-2010-2531	200		+Info	2010-08-20	2016-08-23	4.3	None	Remote	Medium	Not required	Partial	None	None
The var_export function in PHP 5.2 before 5.2.14 and 5.3 before 5.3.3 flushes the output buffer to the user when certain fatal errors occur, even if display_errors is off, which allows remote attackers to obtain sensitive information by causing the application to exceed limits for memory, execution time, or recursion.

Total number of vulnerabilities : 79 Page : 1 (This Page)2