PHP Security Center

Information Disclosure

php: potential exposure to Marvin attack via unsafe implementation of RSA decryption API

Remote Code Execution

php: Argument Injection in PHP-CGI

Information Disclosure

php: Filter bypass in filter_var FILTER_VALIDATE_URL

Remote Code Execution

php: Arguments execute arbitrary commands in Windows shell

Remote Code Execution

iconv Buffer Overflow in Specific Character Set Conversions

Cross-Site Request Forgery

Host/Secure cookie bypass due to partial CVE-2022-31629 fix

Denial of Service

Infinite loop in mb_encode_mimeheader for some inputs

Privilege Escalation

password_verify can erroneously return true

Remote Code Execution

Command injection via array-ish $command parameter of proc_open even if`bypass_shell option enabled on Windows

Cross-Site Request Forgery

XML External Entity vector