Known vulnerabilities in PHP 5.1.6

Vendor: PHP Group
Software: PHP
Version: 5.1.6
Software CPE: cpe:2.3:a:php_group:php:*:*:*:*:*:*:*:*
Total vulnerabilities: 98
Public exploits: 37
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting PHP version 5.1.6 PHP 5.1.6 is affected by 98 vulnerabilities: 3 critical, 10 high, 73 medium, 12 low Critical High Medium Low

Vulnerabilities (98)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU91106 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2024-4577
CWE-78 Critical
Public exploit available
Exploited
8.1.29, 8.2.20, 8.3.8 04.06.2024 SB2024060501
SB2024060502
SB2024060503
and 12 more
#VU74185 - Memory corruption
CVE-2022-4900
CWE-119 Low
No
No
8.0.22, 8.1.9 30.03.2023 SB2023033010
SB2023033014
SB2023041468
and 4 more
#VU35071 - Improper input validation
CVE-2010-4657
CWE-20 Medium
No
No
5.4.4 13.11.2019 SB2019111362
#VU110336 - Improper input validation
CVE-2008-4107
CWE-20 Medium
No
No
4.4.8, 4.10, 5.2.5 30.10.2018 SB2018103061
#VU110317 - Permissions, Privileges, and Access Controls
CVE-2009-4018
CWE-264 Medium
Public exploit available
No
4.10, 5.2.10, 5.3.0 30.10.2018 SB2018103061
#VU110321 - Improper input validation
CVE-2009-3291
CWE-20 Medium
No
No
4.10, 5.2.10 30.10.2018 SB2018103061
SB2009100401
#VU110322 - Improper input validation
CVE-2009-3292
CWE-20 Medium
No
No
4.10, 5.2.10 30.10.2018 SB2018103061
SB2009100401
#VU110323 - Improper input validation
CVE-2009-3293
CWE-20 Medium
No
No
4.10, 5.2.10 30.10.2018 SB2018103061
SB2009100401
#VU110330 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2008-5814
CWE-79 Low
No
No
4.10, 5.2.7 30.10.2018 SB2018103061
#VU110396 - Improper input validation
CVE-2007-2844
CWE-20 High
No
No
4.4.7, 4.10, 5.2.0 30.10.2018 SB2018103061
#VU110402 - Improper input validation
CVE-2007-2509
CWE-20 Low
No
No
4.4.7, 4.10, 5.2.2 30.10.2018 SB2018103061
SB2007052601
#VU110403 - Memory corruption
CVE-2007-2510
CWE-119 Medium
No
No
4.4.7, 4.10, 5.2.2 30.10.2018 SB2018103061
SB2007052601
#VU110407 - Improper input validation
CVE-2007-1883
CWE-20 Medium
No
No
4.4.7, 4.10, 5.2.2 30.10.2018 SB2018103061
#VU110409 - Improper input validation
CVE-2007-1885
CWE-20 Medium
No
No
4.4.7, 4.10, 5.2.0 30.10.2018 SB2018103061
#VU110412 - Improper input validation
CVE-2007-1888
CWE-20 Medium
No
No
4.4.7, 4.10, 5.2.2, 5.4.0 30.10.2018 SB2018103061
#VU110414 - Improper input validation
CVE-2007-1890
CWE-20 Medium
Public exploit available
No
4.4.5, 4.10, 5.2.0 30.10.2018 SB2018103061
#VU110415 - Improper input validation
CVE-2007-1001
CWE-20 Medium
Public exploit available
No
4.4.7, 4.10, 5.2.2 30.10.2018 SB2018103061
SB2007052601
#VU110369 - Improper input validation
CVE-2007-4658
CWE-20 Medium
No
No
4.4.8, 4.10, 5.2.15 03.10.2018 SB2018103061
#VU110388 - Improper input validation
CVE-2007-3799
CWE-20 Medium
Public exploit available
No
4.4.8, 4.10, 5.2.15 03.10.2018 SB2018103061
#VU110375 - Improper Link Resolution Before File Access ('Link Following')
CVE-2007-4652
CWE-59 Low
Public exploit available
No
4.10, 5.2.3 29.07.2017 SB2018103061


Showing elements 1 - 20 out of 98