PHP Security Center

Information disclosure via getimagesize() function when reading multi-chunk images

Heap-based buffer overflow in array_merge()

NULL pointer dereference in PDO PostgreSQL driver

Hostname Null Character Vulnerability

pgsql extension does not check for errors during escaping

NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix%' ORDER BY 1585-- ioVB

Reference counting in `php_request_shutdown` causes Use-After-Free.)) AND 5577=LIKE(CHAR(65,66,67,68,69,70,71),UPPER(HEX(RANDOMBLOB(500000000/2)))) AND ((1818=1818

Header parser of `http` stream wrapper does not handle folded headers

libxml streams use wrong content-type header when requesting a redirected resource.

Streams HTTP wrapper does not fail for headers without colon