Search Results (Refine Search)

Search Parameters:
  • CPE Product Version: cpe:/a:php:php:5.0.4:rc1
There are 385 matching records.
Displaying matches 381 through 385.
Vuln ID Summary CVSS Severity
CVE-2005-3883

CRLF injection vulnerability in the mb_send_mail function in PHP before 5.1.0 might allow remote attackers to inject arbitrary e-mail headers via line feeds (LF) in the "To" address argument.

Published: November 29, 2005; 6:03:00 AM -0500
V3.x:(not available)
V2.0: 5.0 MEDIUM
CVE-2005-3388

Cross-site scripting (XSS) vulnerability in the phpinfo function in PHP 4.x up to 4.4.0 and 5.x up to 5.0.5 allows remote attackers to inject arbitrary web script or HTML via a crafted URL with a "stacked array assignment."

Published: November 01, 2005; 7:47:00 AM -0500
V3.x:(not available)
V2.0: 4.3 MEDIUM
CVE-2005-3389

The parse_str function in PHP 4.x up to 4.4.0 and 5.x up to 5.0.5, when called with only one parameter, allows remote attackers to enable the register_globals directive via inputs that cause a request to be terminated due to the memory_limit setting, which causes PHP to set an internal flag that enables register_globals and allows attackers to exploit vulnerabilities in PHP applications that would otherwise be protected.

Published: November 01, 2005; 7:47:00 AM -0500
V3.x:(not available)
V2.0: 5.0 MEDIUM
CVE-2005-3390

The RFC1867 file upload feature in PHP 4.x up to 4.4.0 and 5.x up to 5.0.5, when register_globals is enabled, allows remote attackers to modify the GLOBALS array and bypass security protections of PHP applications via a multipart/form-data POST request with a "GLOBALS" fileupload field.

Published: November 01, 2005; 7:47:00 AM -0500
V3.x:(not available)
V2.0: 7.5 HIGH
CVE-2005-3319

The apache2handler SAPI (sapi_apache2.c) in the Apache module (mod_php) for PHP 5.x before 5.1.0 final and 4.4 before 4.4.1 final allows attackers to cause a denial of service (segmentation fault) via the session.save_path option in a .htaccess file or VirtualHost.

Published: October 27, 2005; 6:02:00 AM -0400
V3.x:(not available)
V2.0: 2.1 LOW