Vulnerabilities (CVE)

Filtered by vendor Php Subscribe
Filtered by product Php
Total 701 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2008-0599 1 Php 1 Php 2024-02-02 10.0 HIGH 9.8 CRITICAL
The init_request_info function in sapi/cgi/cgi_main.c in PHP before 5.2.6 does not properly consider operator precedence when calculating the length of PATH_TRANSLATED, which might allow remote attackers to execute arbitrary code via a crafted URI.