Skip to content
OpenAdvisories
Unscored DTSA-15-1 3 CVEs

php4 - several vulnerabilities

Published Sep 13, 2005 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 4.0 php4 4:4.3.10-16etch1

Vulnerabilities 3

  • Unscored —

    Race condition in shtool 2.0.1 and earlier allows local users to create or modify arbitrary files via a symlink attack …

  • Unscored —
    CVE-2005-1921 Public exploit EPSS 79%

    Eval injection vulnerability in PEAR XML_RPC 1.3.0 and earlier (aka XML-RPC or xmlrpc) and PHPXMLRPC (aka XML-RPC For P…

  • Unscored —

    Eval injection vulnerability in PHPXMLRPC 1.1.1 and earlier (PEAR XML-RPC for PHP), as used in multiple products includ…