https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T07:27:57.590179+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certa-2008-avi-148 certa-2008-avi-148 2026-10-03T07:27:57.601214+00:00 certa-2008-avi-148 https://cve.radiocsirt.org/vuln/euvd-2026-135711 EUVD-2026-135711 2026-10-03T07:27:57.601252+00:00 EUVD-2026-135711 https://cve.radiocsirt.org/vuln/fkie_cve-2007-3799 fkie_cve-2007-3799 2026-10-03T07:27:57.601266+00:00

The session_start function in ext/session in PHP 4.x up to 4.4.7 and 5.x up to 5.2.3 allows remote attackers to insert arbitrary attributes into the session cookie via special characters in a cookie that is obtained from (1) PATH_INFO, (2) the session_id function, and (3) the session_start function, which are not encoded or filtered when the new session cookie is generated, a related issue to CVE-2006-0207.

 https://cve.radiocsirt.org/vuln/ghsa-wwm7-8cp9-2h4f GHSA-wwm7-8cp9-2h4f 2026-10-03T07:27:57.601297+00:00

The session_start function in ext/session in PHP 4.x up to 4.4.7 and 5.x up to 5.2.3 allows remote attackers to insert arbitrary attributes into the session cookie via special characters in a cookie that is obtained from (1) PATH_INFO, (2) the session_id function, and (3) the session_start function, which are not encoded or filtered when the new session cookie is generated, a related issue to CVE-2006-0207.

 https://cve.radiocsirt.org/vuln/gsd-2007-3799 gsd-2007-3799 2026-10-03T07:27:57.601313+00:00 gsd-2007-3799 https://cve.radiocsirt.org/vuln/rhsa-2007:0888 RHSA-2007:0888 — Red Hat Security Advisory: php security update 2026-10-03T07:27:57.601324+00:00

php CRLF injection php chunk_split integer overflow php cross-site cookie insertion php multiple integer overflows in gd php malformed cookie handling