https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 20:38:34 +0000 https://cve.radiocsirt.org/vuln/bdu:2022-02630 bdu:2022-02630 https://cve.radiocsirt.org/vuln/bdu:2022-02630 https://cve.radiocsirt.org/vuln/certa-2012-avi-244 certa-2012-avi-244 https://cve.radiocsirt.org/vuln/certa-2012-avi-244 https://cve.radiocsirt.org/vuln/euvd-2026-110268 EUVD-2026-110268 https://cve.radiocsirt.org/vuln/euvd-2026-110268 https://cve.radiocsirt.org/vuln/fkie_cve-2012-1172 <p>The file-upload implementation in rfc1867.c in PHP before 5.4.0 does not properly handle invalid [ (open square bracket) characters in name values, which makes it easier for remote attackers to cause a denial of service (malformed $_FILES indexes) or conduct directory traversal attacks during multi-file uploads by leveraging a script that lacks its own filename restrictions.</p> <p>The file-upload implementation in rfc1867.c in PHP before 5.4.0 does not properly handle invalid [ (open square bracket) characters in name values, which makes it easier for remote attackers to cause a denial of service (malformed $_FILES indexes) or conduct directory traversal attacks during multi-file uploads by leveraging a script that lacks its own filename restrictions.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2012-1172 https://cve.radiocsirt.org/vuln/ghsa-jpm9-86g2-j2gx <p>The file-upload implementation in rfc1867.c in PHP before 5.4.0 does not properly handle invalid [ (open square bracket) characters in name values, which makes it easier for remote attackers to cause a denial of service (malformed $_FILES indexes) or conduct directory traversal attacks during multi-file uploads by leveraging a script that lacks its own filename restrictions.</p> <p>The file-upload implementation in rfc1867.c in PHP before 5.4.0 does not properly handle invalid [ (open square bracket) characters in name values, which makes it easier for remote attackers to cause a denial of service (malformed $_FILES indexes) or conduct directory traversal attacks during multi-file uploads by leveraging a script that lacks its own filename restrictions.</p> https://cve.radiocsirt.org/vuln/ghsa-jpm9-86g2-j2gx https://cve.radiocsirt.org/vuln/gsd-2012-1172 gsd-2012-1172 https://cve.radiocsirt.org/vuln/gsd-2012-1172 https://cve.radiocsirt.org/vuln/rhsa-2012:1045 <p>php: zend_strndup() NULL pointer dereference may cause DoS php: XSLT file writing vulnerability php: strtotime timezone memory leak php: $_FILES array indexes corruption php: incomplete CVE-2012-1823 fix - missing filtering of -T and -h</p> <p>php: zend_strndup() NULL pointer dereference may cause DoS php: XSLT file writing vulnerability php: strtotime timezone memory leak php: $_FILES array indexes corruption php: incomplete CVE-2012-1823 fix - missing filtering of -T and -h</p> https://cve.radiocsirt.org/vuln/rhsa-2012:1045