Known vulnerabilities in PHP 5

Vendor: PHP Group
Software: PHP
Version: 5
Software CPE: cpe:2.3:a:php_group:php:*:*:*:*:*:*:*:*
Total vulnerabilities: 65
Public exploits: 32
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting PHP version 5 PHP 5 is affected by 65 vulnerabilities: 2 critical, 11 high, 38 medium, 14 low Critical High Medium Low

Vulnerabilities (65)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU91106 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2024-4577
CWE-78 Critical
Public exploit available
Exploited
8.1.29, 8.2.20, 8.3.8 04.06.2024 SB2024060501
SB2024060502
SB2024060503
and 12 more
#VU110415 - Improper input validation
CVE-2007-1001
CWE-20 Medium
Public exploit available
No
4.4.7, 4.10, 5.2.2 30.10.2018 SB2018103061
SB2007052601
#VU110418 - Improper input validation
CVE-2007-1825
CWE-20 Medium
Public exploit available
No
4.4.5, 4.10 30.10.2018 SB2018103061
#VU110420 - Improper input validation
CVE-2007-1717
CWE-20 Medium
No
No
4.4.7, 4.10, 5.2.2 30.10.2018 SB2018103061
SB2007052601
#VU110421 - Improper input validation
CVE-2007-1718
CWE-20 Medium
Public exploit available
No
4.4.7, 4.10, 5.2.2 30.10.2018 SB2018103061
SB2007052601
#VU110422 - Improper input validation
CVE-2007-1700
CWE-20 Medium
Public exploit available
No
4.4.5, 4.10, 5.2.0 30.10.2018 SB2018103061
SB2007052601
#VU110429 - Improper input validation
CVE-2007-1582
CWE-20 Medium
Public exploit available
No
4.4.7, 4.10, 5.2.2 30.10.2018 SB2018103061
#VU110430 - Improper input validation
CVE-2007-1583
CWE-20 Medium
Public exploit available
No
4.4.7, 4.10, 5.2.2 30.10.2018 SB2018103061
SB2007052601
#VU110448 - Improper input validation
CVE-2007-1376
CWE-20 Medium
Public exploit available
No
4.4.6, 4.10, 5.2.0 30.10.2018 SB2018103061
SB2007032001
#VU110451 - Improper input validation
CVE-2007-1380
CWE-20 Medium
Public exploit available
No
4.4.5, 4.10, 5.2.0 30.10.2018 SB2018103061
SB2007032001
#VU110458 - Improper input validation
CVE-2007-0905
CWE-20 Medium
No
No
4.4.5, 4.10, 5.2.0 30.10.2018 SB2018103061
#VU110459 - Improper input validation
CVE-2007-0906
CWE-20 Medium
No
No
4.4.5, 4.10, 5.2.0 30.10.2018 SB2018103061
SB2007032001
#VU110460 - Improper input validation
CVE-2007-0907
CWE-20 Medium
No
No
4.4.5, 4.10, 5.2.0 30.10.2018 SB2018103061
SB2007032001
#VU110462 - Improper input validation
CVE-2007-0909
CWE-20 Medium
No
No
4.4.5, 4.10, 5.2.0 30.10.2018 SB2018103061
SB2007032001
#VU110463 - Improper input validation
CVE-2007-0910
CWE-20 High
No
No
4.4.5, 4.10 30.10.2018 SB2018103061
SB2007032001
#VU110468 - Improper Control of Generation of Code ('Code Injection')
CVE-2006-4812
CWE-94 High
Public exploit available
No
4.10 30.10.2018 SB2018103061
SB2006103001
#VU110469 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2006-5178
CWE-362 Low
No
No
4.4.5, 4.10, 5.1.6 30.10.2018 SB2018103061
#VU110356 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2007-5653
CWE-78 High
Public exploit available
No
5.0 29.09.2017 SB2018110514
#VU110514 - Improper input validation
CVE-2004-1020
CWE-20 Medium
Public exploit available
No
4.3.10, 5.0.3 11.07.2017 SB2020120862
#VU110452 - Memory corruption
CVE-2007-1381
CWE-119 High
Public exploit available
No
5.0 05.09.2008 SB2018110514


Showing elements 1 - 20 out of 65