PHP Security Center

Information Disclosure

php: potential exposure to Marvin attack via unsafe implementation of RSA decryption API

Remote Code Execution

php: Argument Injection in PHP-CGI

Information Disclosure

php: Filter bypass in filter_var FILTER_VALIDATE_URL

Cross-Site Request Forgery

php: Arguments execute arbitrary commands in Windows shell

Remote Code Execution

iconv Buffer Overflow in Specific Character Set Conversions

Cross-Site Request Forgery

Host/Secure cookie bypass due to partial CVE-2022-31629 -5955')) ORDER BY 1-- seus

Cross-Site Request Forgery

Infinite loop in mb_encode_mimeheader for some inputs

Privilege Escalation

password_verify can erroneously return true

Remote Code Execution

Command injection via array-ish $command parameter of proc_open even if`bypass_shell option enabled on Windows

Cross-Site Request Forgery

XML External Entity vector