PHP Security Center

XML eXternal Entity injection

XML External Entity vector

Information Disclosure

Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP

Denial of Service

DOS vulnerability when parsing multipart request body

SQL Injection

CVE-2022-31631 php: PDO::quote() may return unquoted string due to an integer overflow

Information Disclosure

CVE-2022-31630 php: OOB read due to insufficient input validation in imageloadfont()

Denial of Service

CVE-2022-31628 php: phar wrapper can produce a denial of service when using quine gzip file

Cross-Site Request Forgery

CVE-2022-31629 php: standard insecure cookie could be treated as a `__Host-` or `__Secure-` cookie by PHP applications

Information Disclosure

CVE-2022-31627 php: heap buffer overflow in finfo_buffer

Remote Code Execution

CVE-2022-31625 php: uninitialized array in pg_query_params() leading to RCE

Remote Code Execution

CVE-2022-31626 php: password of excessive length triggers buffer overflow leading to RCE