Exposición de PHP
Programming languages1137
score de exposición
4.221.648
sitios usan
4
en explotación
55
críticos
CVEs
1223 resultadosCVE-2022-31627HIGHHeap buffer overflow in finfo_bufferEPSS 2.1%CVE-2021-21705MEDIUMIncorrect URL validation in FILTER_VALIDATE_URLEPSS 2.1%CVE-2024-11236CRITICALInteger overflow in the firebird and dblib quoters causing OOB writesEPSS 2.1%CVE-2020-7069MEDIUMWrong ciphertext/tag in AES-CCM encryption for a 12 bytes IVEPSS 2.1%CVE-2020-5558—CuteNews 2.0.1 allows remote authenticated attackers to execute arbitrary PHP code via unspecified vectors.EPSS 2.1%CVE-2025-7160MEDIUMPHPGurukul Zoo Management System index.php sql injectionEPSS 2.0%CVE-2019-11037MEDIUMOut of bounds memory write in PHP Imagick extensionEPSS 2.0%CVE-2024-2757HIGHPHP mb_encode_mimeheader runs endlessly for some inputsEPSS 1.9%CVE-2026-55584HIGHphpSysInfo: IP allowlist (PSI_ALLOWED) bypass via spoofed X-Forwarded-For / Client-IP headersEPSS 1.9%CVE-2021-29454HIGHSandbox Escape by math function in smartyEPSS 1.9%CVE-2012-10037CRITICALPhpTax pfilez Parameter Exec Remote Code InjectionEPSS 1.8%CVE-2021-47749HIGHYouPHPTube <= 7.8 - Directory TraversalEPSS 1.8%CVE-2021-21704MEDIUMMultiple vulnerabilities in Firebird client extensionEPSS 1.8%CVE-2023-3767CRITICALOS command injection on EasyPHP Webserver EPSS 1.8%CVE-2023-4110LOWPHP Jabbers Availability Booking Calendar index.php cross site scriptingEPSS 1.8%CVE-2011-4082—A local file inclusion flaw was found in the way the phpLDAPadmin before 0.9.8 processed certain values of the "Accept-Language" HTTP headerEPSS 1.7%CVE-2020-7068MEDIUMUse of freed hash key in the phar_parse_zipfile functionEPSS 1.7%CVE-2023-3823HIGHSecurity issue with external entity loading in XML without enabling itEPSS 1.6%CVE-2012-10056HIGHPHP Volunteer Management System 1.0.2 Arbitrary File UploadEPSS 1.6%CVE-2024-11233MEDIUMSingle byte overread with convert.quoted-printable-decode filterEPSS 1.6%