PHP Group

Records108All Threatist records

Exploited (KEV)3In CISA KEV

CVSS critical23CVSS 9.0–10.0

CVSS high30CVSS 7.0–8.9

Exploited now

PHP Group records in CISA KEV

TI-2026-78793 PHP Memory Corruption Vulnerability CRITICAL 99KEV 2026-10-26 TI-2026-78794 PHP Stale Internal Request-State Vulnerability CRITICAL 99KEV 2026-10-26 TI-2024-04260 PHP-CGI OS Command Injection Vulnerability CRITICAL 100KEV 2024-06-12

Components

Products in the NVD configurations · select one to filter the records

Php 3 records MEDIUM Pear 1 record MEDIUM

Records

3 records in Php · all components

TI-2006-02920 CVE-2006-3016 · GHSA-rrmc-m598-86rh

Unspecified vulnerability in session.c in PHP before 5.1.3 has unknown impact and attack…

MEDIUM 45

Unspecified vulnerability in session.c in PHP before 5.1.3 has unknown impact and attack vectors, related to "certain characters in session names," including special characters that are frequently associated with CRLF in…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.02545 Published 2006-06-14 Fixed

TI-2006-02922 CVE-2006-3018 · GHSA-p2mf-5wpv-qq3x

Unspecified vulnerability in the session extension functionality in PHP before 5.1.3 has…

LOW 37

Unspecified vulnerability in the session extension functionality in PHP before 5.1.3 has unknown impact and attack vectors related to heap corruption.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02009 Published 2006-06-14 No fix listed

TI-2006-06946 CVE-2006-7205 · GHSA-6m79-37j9-r59p

The array_fill function in ext/standard/array.c in PHP 4.4.2 and 5.1.2 allows…

LOW 25

The array_fill function in ext/standard/array.c in PHP 4.4.2 and 5.1.2 allows context-dependent attackers to cause a denial of service (memory consumption) via a large num value.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01261 Published 2007-05-24 No fix listed

Open these records in search →

Critical	23
High	30
Medium	52
Low	3
No CVSS	0