Innovate faster and cut risk with PHP experts from Zend Services.
Beginning to advanced PHP classes to learn and earn global certification.
Help me choose >
Submit support requests and browse self-service resources.
out-of-bounds read when using a malformed url-encoded string
information disclosure in exif_read_data() function
Remote Code Execution
by using mb_strtolower() function with UTF-32LE encoding leads to potential code execution
Remote File Inclusion
information disclosure in function get_headers
Denial of Service
NULL pointer dereference in PHP session upload progress
heap-based buffer overflow in phar_extract_file
Out of bounds read in php_strip_tags_ex
Global buffer-overflow in mbfl_filt_conv_big5_wchar function
files added to tar with Phar::buildFromIterator have all-access permissions
PHP DirectoryIterator class accepts filenames with embedded null byte and treats them as terminating at that byte