php.net
|
support
|
documentation
|
report a bug
|
advanced search
|
search howto
|
statistics
|
random bug
|
login
go to bug id or search bugs for
« Show Previous 30 Entries
Showing 31-60 of 25084
Show Next 30 Entries »
ID#
Date
Last Modified
Package
Type
Status
PHP Version
OS
Summary
Assigned
73867
(edit)
2017-01-05 10:30 UTC
2017-01-18 15:12 UTC
GD related
Sec Bug
Not a bug
7.1.0
CVE-2016-6912: Fix double-free in gdImageWebPtr()
cmb
74459
(edit)
2017-04-17 10:13 UTC
2017-06-25 07:14 UTC
DOM XML related
Sec Bug
Not a bug
master-Git-2017-04-17 (Git)
Linux
Stack-based Buffer Overflow in DOM validation
74460
(edit)
2017-04-17 13:00 UTC
2017-06-25 07:13 UTC
DOM XML related
Sec Bug
Not a bug
master-Git-2017-04-17 (Git)
Linux
Heap-based Buffer Overflow in DOM parser
74662
(edit)
2017-05-26 21:03 UTC
2017-05-27 05:05 UTC
Website problem
Sec Bug
Not a bug
Irrelevant
Multiple subdomains source code disclosure and directory browsing
74704
(edit)
2017-06-07 13:24 UTC
2017-10-15 22:40 UTC
GD related
Sec Bug
Not a bug
7.0.19
Linux
PNG PLTE Chunk ability to inject malicious code
75661
(edit)
2017-12-10 08:56 UTC
2017-12-14 15:19 UTC
filter
Sec Bug
Not a bug
7.2.0
FILTER_VALIDATE_DOMAIN allows characters that can lead to script injection
76653
(edit)
2018-07-22 21:13 UTC
2018-07-23 12:45 UTC
EXIF related
Sec Bug
Not a bug
7.2.8
Linux
Server Side Request Forgery using exif_read_data?
cmb
78005
(edit)
2019-05-12 11:27 UTC
2019-05-13 15:40 UTC
Filter related
Sec Bug
Not a bug
7.1.29
Windows
Remote File Inclusion protection bypass in PHP version 7.1.29
cmb
78011
(edit)
2019-05-14 14:12 UTC
2019-05-16 07:55 UTC
Filesystem function related
Sec Bug
Not a bug
7.3.5
pathinfo behavior regarding extensions can lead to XSS risk
78588
(edit)
2019-09-23 10:12 UTC
2019-09-23 14:39 UTC
cURL related
Sec Bug
Not a bug
master-Git-2019-09-23 (snap)
Windows 10
Curl should be updated
78605
(edit)
2019-09-29 00:12 UTC
2019-11-10 19:01 UTC
OpenSSL related
Sec Bug
Not a bug
7.2.24
all
Mitigate EFAIL attack on openssl_pkcs7_encrypt() output
bukka
78636
(edit)
2019-10-05 09:50 UTC
2019-10-05 17:28 UTC
Strings related
Sec Bug
Not a bug
Next Major Version
Windows
Someone has changed my personal data source
79309
(edit)
2020-02-26 19:01 UTC
2020-02-26 19:39 UTC
MySQLi related
Sec Bug
Not a bug
7.4.3
any
possible information leak of PID on MySQL connection failure
79383
(edit)
2020-03-14 19:19 UTC
2020-05-31 11:46 UTC
Zip Related
Sec Bug
Not a bug
Irrelevant
Linux (Ubuntu)
ZipArchive::extractTo() sets excessive permissions by default
81655
(edit)
2021-11-24 14:30 UTC
2021-12-02 08:03 UTC
*Compile Issues
Sec Bug
Not a bug
8.0.13
All
TrojanSource vulnerability
81715
(edit)
2022-04-06 19:14 UTC
2022-04-07 09:46 UTC
*Directory/Filesystem functions
Sec Bug
Not a bug
8.1.4
Linux/Windows
Apache + PHP <= 8.1.4 open_basedir bypass
cmb
81722
(edit)
2022-06-14 19:17 UTC
2022-06-20 12:47 UTC
Unknown/Other Function
Sec Bug
Not a bug
7.4.30
Ubuntu
Session Fixation in PHP Core PHPSESSID
979
(edit)
1998-12-07 18:56 UTC
2006-12-12 12:36 UTC
Feature/Change Request
Req
Not a bug
4.0
N/A
[PEAR] Openmarket Transact support
2328
(edit)
1999-09-19 22:51 UTC
2003-02-06 21:38 UTC
Feature/Change Request
Req
Not a bug
4.0
anything
I would like animated gif support within php.
2393
(edit)
1999-09-27 19:06 UTC
2002-10-01 14:54 UTC
Feature/Change Request
Req
Not a bug
3.0.12
Linux
Can't use parse_url for url validation
2541
(edit)
1999-10-16 03:43 UTC
2002-08-17 15:53 UTC
Feature/Change Request
Req
Not a bug
4.0
Linux 2.2.12 / Windows NT
dl(string name) should not require the file extension for the module name
2807
(edit)
1999-11-23 22:52 UTC
2006-04-03 09:22 UTC
Feature/Change Request
Req
Not a bug
4.0
Solaris 2.6
LOB descriptors with Fetch/Result and FetchInto
maxim
3074
(edit)
1999-12-31 08:36 UTC
2003-02-18 11:48 UTC
Feature/Change Request
Req
Not a bug
4.0 Latest CVS (
all
allow: foreach ($array as $key => &$val) in zend (byref)
3275
(edit)
2000-01-22 00:43 UTC
2007-01-07 10:44 UTC
Feature/Change Request
Req
Not a bug
4.0
[PEAR] ICQ support
3830
(edit)
2000-03-14 11:27 UTC
2013-10-27 15:10 UTC
Scripting Engine problem
Req
Not a bug
*
*
Function to timeout/break off a function
4346
(edit)
2000-05-07 16:29 UTC
2002-03-22 19:08 UTC
Feature/Change Request
Req
Not a bug
4.1.2
all
Suggestion for error trap in imagecreatefromjpeg
5050
(edit)
2000-06-15 05:16 UTC
2007-01-07 10:50 UTC
Feature/Change Request
Req
Not a bug
4.0.0 Release
FreeBSD 4.0-R/3.x-R
$php_errormsg not changed on errors inside functions
5127
(edit)
2000-06-19 16:57 UTC
2002-01-28 17:01 UTC
Feature/Change Request
Req
Not a bug
4.0 Latest CVS (19/06/2000)
win2000/all
can
5169
(edit)
2000-06-21 12:56 UTC
2010-08-07 01:36 UTC
*General Issues
Req
Not a bug
4.0 Latest CVS (21/06/2000)
WinNT 4.0
Missing recursive behavior
5226
(edit)
2000-06-25 18:56 UTC
2002-10-27 19:07 UTC
Feature/Change Request
Req
Not a bug
4.0.0 Release
freebsd 3.1
arrayfields reorganized when using array_pop
« Show Previous 30 Entries
Showing 31-60 of 25084
Show Next 30 Entries »
Copyright © 2001-2025 The PHP Group
All rights reserved.
Last updated: Tue Jul 15 02:01:33 2025 UTC