Skip to content
OpenAdvisories
Unscored DSA-531 2 CVEs

php4 - several vulnerabilities

Published Jul 20, 2004 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 3.0 php4 4.1.2-7

Vulnerabilities 2

  • Unscored —
    CVE-2004-0594 Public exploit EPSS 55%

    The memory_limit functionality in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, under certain conditions such as when re…

  • Unscored —
    CVE-2004-0595 Public exploit EPSS 45%

    The strip_tags function in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, does not filter null (\0) characters within tag…