PatchTheCVEphp group vulnerabilities
Recent CVEs affecting php group products. 4 tracked.
php group has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2007-05-24. Highest priority: CVE-2006-3016 (score 59/100).
- CVE-2007-2519 MEDIUM 6.8 DOWNGRADE Directory traversal vulnerability in the installer in PEAR 1.0 through 1.5.3 allows user-assisted remote attac
- CVE-2006-7205 MEDIUM 5.0 DOWNGRADE The array_fill function in ext/standard/array.c in PHP 4.4.2 and 5.1.2 allows context-dependent attackers to c
- CVE-2006-3018 HIGH 7.5 UPGRADE Unspecified vulnerability in the session extension functionality in PHP before 5.1.3 has unknown impact and at
- CVE-2006-3016 HIGH 9.3 UPGRADE Unspecified vulnerability in session.c in PHP before 5.1.3 has unknown impact and attack vectors, related to "
FAQ
How do I fix php group vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is php group being exploited right now?
None of the tracked php group CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which php group CVE should I patch first?
CVE-2006-3016 currently ranks highest (59/100): Unspecified vulnerability in session.c in PHP before 5.1.3 has unknown impact and attack vectors, related to ".