https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 23:42:02 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-137651 EUVD-2026-137651 https://cve.radiocsirt.org/vuln/euvd-2026-137651 https://cve.radiocsirt.org/vuln/fkie_cve-2007-5899 <p>The output_add_rewrite_var function in PHP before 5.2.5 rewrites local forms in which the ACTION attribute references a non-local URL, which allows remote attackers to obtain potentially sensitive information by reading the requests for this URL, as demonstrated by a rewritten form containing a local session ID.</p> <p>The output_add_rewrite_var function in PHP before 5.2.5 rewrites local forms in which the ACTION attribute references a non-local URL, which allows remote attackers to obtain potentially sensitive information by reading the requests for this URL, as demonstrated by a rewritten form containing a local session ID.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2007-5899 https://cve.radiocsirt.org/vuln/ghsa-2rqw-x4fp-36cv <p>The output_add_rewrite_var function in PHP before 5.2.5 rewrites local forms in which the ACTION attribute references a non-local URL, which allows remote attackers to obtain potentially sensitive information by reading the requests for this URL, as demonstrated by a rewritten form containing a local session ID.</p> <p>The output_add_rewrite_var function in PHP before 5.2.5 rewrites local forms in which the ACTION attribute references a non-local URL, which allows remote attackers to obtain potentially sensitive information by reading the requests for this URL, as demonstrated by a rewritten form containing a local session ID.</p> https://cve.radiocsirt.org/vuln/ghsa-2rqw-x4fp-36cv https://cve.radiocsirt.org/vuln/gsd-2007-5899 gsd-2007-5899 https://cve.radiocsirt.org/vuln/gsd-2007-5899 https://cve.radiocsirt.org/vuln/rhsa-2008:0505 <p>php crash in glob() and fnmatch() functions php htmlentities/htmlspecialchars multibyte sequences php session ID leakage PHP multibyte shell escape flaw mysql: privilege escalation via DATA/INDEX DIRECTORY directives PHP 32 bit weak random seed PHP weak 64 bit random seed</p> <p>php crash in glob() and fnmatch() functions php htmlentities/htmlspecialchars multibyte sequences php session ID leakage PHP multibyte shell escape flaw mysql: privilege escalation via DATA/INDEX DIRECTORY directives PHP 32 bit weak random seed PHP weak 64 bit random seed</p> https://cve.radiocsirt.org/vuln/rhsa-2008:0505