Approved changes feed: RSS · Atom
cpe:2.3:a:php:php:4.0.7:rc4:*:*:*:*:*:*
part: a version: 4.0.7 update: rc4
| Vendor | Php (9aec2613-7a27-5ce5-8ac7-140851d8da4c) |
|---|---|
| Product | Php (38640b93-5029-5cca-a025-ab7d01c98b51) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/php/php-src |
purl2cpe | 2026-06-01 10:17:42.402646 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2009-4143 |
vulnerable | 2026-06-08 04:51:47.332939 |
Details available
PHP before 5.2.12 does not properly handle session data, which has unspecified impact and attack vectors related to (1) interrupt corruption of the SESSION superglobal array and (2) the session.save_path directive.
Published: 2009-12-21T16:00:00.000Z
Updated: 2024-08-07T06:54:09.936Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-4142 |
vulnerable | 2026-06-08 04:51:47.319888 |
Details available
The htmlspecialchars function in PHP before 5.2.12 does not properly handle (1) overlong UTF-8 sequences, (2) invalid Shift_JIS sequences, and (3) invalid EUC-JP sequences, which allows remote attackers to conduct cross-site scripting (XSS) attacks by placing a crafted byte sequence before a special character.
Published: 2009-12-21T16:00:00.000Z
Updated: 2024-08-07T06:54:09.694Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-4018 |
vulnerable | 2026-06-08 04:51:46.233893 |
Details available
The proc_open function in ext/standard/proc_open.c in PHP before 5.2.11 and 5.3.x before 5.3.1 does not enforce the (1) safe_mode_allowed_env_vars and (2) safe_mode_protected_env_vars directives, which allows context-dependent attackers to execute programs with an arbitrary environment via the env parameter, as demonstrated by a crafted value of the LD_LIBRARY_PATH environment variable.
Published: 2009-11-27T19:00:00.000Z
Updated: 2024-08-07T06:45:50.944Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-3293 |
vulnerable | 2026-06-08 04:51:33.233612 |
Details available
Unspecified vulnerability in the imagecolortransparent function in PHP before 5.2.11 has unknown impact and attack vectors related to an incorrect "sanity check for the color index."
Published: 2009-09-22T10:00:00.000Z
Updated: 2024-08-07T06:22:24.230Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-3292 |
vulnerable | 2026-06-08 04:51:33.230743 |
Details available
Unspecified vulnerability in PHP before 5.2.11, and 5.3.x before 5.3.1, has unknown impact and attack vectors related to "missing sanity checks around exif processing."
Published: 2009-09-22T10:00:00.000Z
Updated: 2024-08-07T06:22:24.335Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-3291 |
vulnerable | 2026-06-08 04:51:33.215873 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-2626 |
vulnerable | 2026-06-08 04:51:29.459074 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-7068 |
vulnerable | 2026-06-08 04:51:05.542190 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-5814 |
vulnerable | 2026-06-08 04:50:53.271857 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-4107 |
vulnerable | 2026-06-08 04:50:37.850794 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.