PHP 3

Organization

CVE-2016-10033: PHPMailer Command Injection Vulnerability

Known Exploited Vulnerabilities CISA KEV Catalog Jul 07, 2025

PHPMailer contains a command injection vulnerability because it fails to sanitize user-supplied input. Specifically, this issue affects the 'mail()' function of 'class.phpmailer.php' script. An attacker can exploit this issue to execute arbitrary code...

Vulnerabilities & Patching

CVE-2012-1823: PHP-CGI Query String Parameter Vulnerability

Known Exploited Vulnerabilities CISA KEV Catalog Mar 25, 2022

sapi/cgi/cgi_main.c in PHP, when configured as a CGI script, does not properly handle query strings, which allows remote attackers to execute arbitrary code.

Vulnerabilities & Patching

CVE-2019-11043: PHP FastCGI Process Manager (FPM) Buffer Overflow Vulnerability

Known Exploited Vulnerabilities CISA KEV Catalog Mar 25, 2022

In some versions of PHP in certain configurations of FPM setup, it is possible to cause FPM module to write past allocated buffers allowing the possibility of remote code execution.

Vulnerabilities & Patching