https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 08:12:45 +0000 https://cve.radiocsirt.org/vuln/certa-2006-avi-332 certa-2006-avi-332 https://cve.radiocsirt.org/vuln/certa-2006-avi-332 https://cve.radiocsirt.org/vuln/euvd-2026-141311 EUVD-2026-141311 https://cve.radiocsirt.org/vuln/euvd-2026-141311 https://cve.radiocsirt.org/vuln/fkie_cve-2006-3016 <p>Unspecified vulnerability in session.c in PHP before 5.1.3 has unknown impact and attack vectors, related to &#34;certain characters in session names,&#34; including special characters that are frequently associated with CRLF injection, SQL injection, cross-site scripting (XSS), and HTTP response splitting vulnerabilities. NOTE: while the nature of the vulnerability is unspecified, it is likely that this is related to a violation of an expectation by PHP applications that the session name is alphanumeric, as implied in the PHP manual for session_name().</p> <p>Unspecified vulnerability in session.c in PHP before 5.1.3 has unknown impact and attack vectors, related to &#34;certain characters in session names,&#34; including special characters that are frequently associated with CRLF injection, SQL injection, cross-site scripting (XSS), and HTTP response splitting vulnerabilities. NOTE: while the nature of the vulnerability is unspecified, it is likely that this is related to a violation of an expectation by PHP applications that the session name is alphanumeric, as implied in the PHP manual for session_name().</p> https://cve.radiocsirt.org/vuln/fkie_cve-2006-3016 https://cve.radiocsirt.org/vuln/ghsa-rrmc-m598-86rh <p>Unspecified vulnerability in session.c in PHP before 5.1.3 has unknown impact and attack vectors, related to &#34;certain characters in session names,&#34; including special characters that are frequently associated with CRLF injection, SQL injection, cross-site scripting (XSS), and HTTP response splitting vulnerabilities. NOTE: while the nature of the vulnerability is unspecified, it is likely that this is related to a violation of an expectation by PHP applications that the session name is alphanumeric, as implied in the PHP manual for session_name().</p> <p>Unspecified vulnerability in session.c in PHP before 5.1.3 has unknown impact and attack vectors, related to &#34;certain characters in session names,&#34; including special characters that are frequently associated with CRLF injection, SQL injection, cross-site scripting (XSS), and HTTP response splitting vulnerabilities. NOTE: while the nature of the vulnerability is unspecified, it is likely that this is related to a violation of an expectation by PHP applications that the session name is alphanumeric, as implied in the PHP manual for session_name().</p> https://cve.radiocsirt.org/vuln/ghsa-rrmc-m598-86rh https://cve.radiocsirt.org/vuln/gsd-2006-3016 gsd-2006-3016 https://cve.radiocsirt.org/vuln/gsd-2006-3016 https://cve.radiocsirt.org/vuln/rhsa-2006:0669 <p>security flaw security flaw security flaw gd: GIF handling buffer overflow security flaw</p> <p>security flaw security flaw security flaw gd: GIF handling buffer overflow security flaw</p> https://cve.radiocsirt.org/vuln/rhsa-2006:0669