| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2007-1718 | 7.8 | CRLF injection vulnerability in the mail function in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 allows remote attackers to inject arbitrary e-mail headers and possibly conduct spam attacks via a control character immediately following folding of | 2018-10-30 16:25:00 | 2007-03-28 00:19:00 |
| CVE-2007-1717 | 5.0 | The mail function in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 truncates e-mail messages at the first ASCIIZ ('\0') byte, which might allow context-dependent attackers to prevent intended information from being delivered in e-mail messages. NO | 2018-10-30 16:25:00 | 2007-03-28 00:19:00 |
| CVE-2007-1700 | 7.5 | The session extension in PHP 4 before 4.4.5, and PHP 5 before 5.2.1, calculates the reference count for the session variables without considering the internal pointer from the session globals, which allows context-dependent attackers to execute arbit | 2018-10-30 16:25:00 | 2007-03-27 01:19:00 |
| CVE-2007-1583 | 6.8 | The mb_parse_str function in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 sets the internal register_globals flag and does not disable it in certain cases when a script terminates, which allows remote attackers to invoke available PHP scripts with | 2018-10-30 16:25:00 | 2007-03-21 23:19:00 |
| CVE-2007-1582 | 6.8 | The resource system in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 allows context-dependent attackers to execute arbitrary code by interrupting certain functions in the GD (ext/gd) extension and unspecified other extensions via a userspace error | 2018-10-30 16:25:00 | 2007-03-21 23:19:00 |
| CVE-2007-1581 | 9.3 | The resource system in PHP 5.0.0 through 5.2.1 allows context-dependent attackers to execute arbitrary code by interrupting the hash_update_file function via a userspace (1) error or (2) stream handler, which can then be used to destroy and modify in | 2018-10-30 16:25:00 | 2007-03-21 23:19:00 |
| CVE-2007-1396 | 6.8 | The import_request_variables function in PHP 4.0.7 through 4.4.6, and 5.x before 5.2.2, when called without a prefix, does not prevent the (1) GET, (2) POST, (3) COOKIE, (4) FILES, (5) SERVER, (6) SESSION, and other superglobals from being overwritte | 2018-10-30 16:25:00 | 2007-03-10 22:19:00 |
| CVE-2007-1380 | 5.0 | The php_binary serialization handler in the session extension in PHP before 4.4.5, and 5.x before 5.2.1, allows context-dependent attackers to obtain sensitive information (memory contents) via a serialized variable entry with a large length value, w | 2018-10-30 16:25:00 | 2007-03-10 00:19:00 |
| CVE-2007-1379 | 5.1 | The ovrimos_close function in the Ovrimos extension for PHP before 4.4.5 can trigger efree of an arbitrary address, which might allow context-dependent attackers to execute arbitrary code. | 2018-10-30 16:25:00 | 2007-03-10 00:19:00 |
| CVE-2007-1378 | 5.1 | The ovrimos_longreadlen function in the Ovrimos extension for PHP before 4.4.5 allows context-dependent attackers to write to arbitrary memory locations via the result_id and length arguments. | 2018-10-30 16:25:00 | 2007-03-10 00:19:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: