Read the docs

PHP

Records778All Threatist records
Exploited (KEV)8In CISA KEV
CVSS critical167CVSS 9.0–10.0
CVSS high256CVSS 7.0–8.9

Exploited now

PHP records in CISA KEV
TI-2026-78793 PHP Memory Corruption Vulnerability Priority CRITICAL 99KEV 2026-10-26TI-2026-78794 PHP Stale Internal Request-State Vulnerability Priority CRITICAL 99KEV 2026-10-26TI-2016-08118 PHPMailer Command Injection Vulnerability Priority CRITICAL 100KEV 2025-07-07TI-2024-04260 PHP-CGI OS Command Injection Vulnerability Priority CRITICAL 100KEV 2024-06-12TI-2020-17477 PEAR Archive_Tar Deserialization of Untrusted Data Vulnerability Priority CRITICAL 93KEV 2022-08-25TI-2020-18513 PEAR Archive_Tar Improper Link Resolution Vulnerability Priority CRITICAL 90KEV 2022-08-25

Components

Products in the NVD configurations · select one to filter the records
Php 740 records CRITICAL Pear 5 records MEDIUM Archive Tar 4 records CRITICAL Frankenphp 2 records MEDIUM Pearweb 2 records MEDIUM Php Script Index 2 records LOW Animated Smiley Generator 1 record LOW Ar Memberscript 1 record LOW

Records

5 records in Pear · all components

TI-2006-00137 CVE-2006-0144 · GHSA-j5qr-fr9w-5pj5

The proxy server feature in go-pear.php in PHP PEAR 0.2.2, as used in Apache2Triad…

Priority LOW 36

The proxy server feature in go-pear.php in PHP PEAR 0.2.2, as used in Apache2Triad, allows remote attackers to execute arbitrary PHP code by redirecting go-pear.php to a malicious proxy server that provides a modified ve…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01827 Published 2006-01-09 No fix listed CWE-94
Open these records in search →