Vulnerabilities (CVE)

Filtered by vendor Php Subscribe
Filtered by product Php
Total 702 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2000-0860 1 Php 1 Php 2023-12-10 5.0 MEDIUM N/A
The file upload capability in PHP versions 3 and 4 allows remote attackers to read arbitrary files by setting hidden form fields whose names match the names of internal PHP script variables.
CVE-2002-0121 1 Php 1 Php 2023-12-10 2.1 LOW N/A
PHP 4.0 through 4.1.1 stores session IDs in temporary files whose name contains the session ID, which allows local users to hijack web connections.