PHP Security Center

Information Disclosure

php: PHP-FPM Log Manipulation Vulnerability

Cross-Site Request Forgery

php: Erroneous parsing of multipart form data

Remote Code Execution

php: PHP CGI Parameter Injection Vulnerability (CVE-2024-4577 bypass)

Remote Code Execution

php: cgi.force_redirect configuration is bypassable due to the environment variable collision

Information Disclosure

php: potential exposure to Marvin attack via unsafe implementation of RSA decryption API

Remote Code Execution

php: Argument Injection in PHP-CGI

Information Disclosure

php: Filter bypass in filter_var FILTER_VALIDATE_URL

Cross-Site Request Forgery

php: Arguments execute arbitrary commands in Windows shell

Remote Code Execution

iconv Buffer Overflow in Specific Character Set Conversions

Cross-Site Request Forgery

Host/Secure cookie bypass due to partial CVE-2022-31629 -5955')) ORDER BY 1-- seus