https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 18:06:33 +0000 https://cve.radiocsirt.org/vuln/bdu:2016-01363 bdu:2016-01363 https://cve.radiocsirt.org/vuln/bdu:2016-01363 https://cve.radiocsirt.org/vuln/bell-cve-2015-4642 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Withdrawn by the publisher.</strong></p> https://cve.radiocsirt.org/vuln/bell-cve-2015-4642 https://cve.radiocsirt.org/vuln/certfr-2015-avi-265 certfr-2015-avi-265 https://cve.radiocsirt.org/vuln/certfr-2015-avi-265 https://cve.radiocsirt.org/vuln/cnvd-2015-03910 cnvd-2015-03910 https://cve.radiocsirt.org/vuln/cnvd-2015-03910 https://cve.radiocsirt.org/vuln/euvd-2026-92749 EUVD-2026-92749 https://cve.radiocsirt.org/vuln/euvd-2026-92749 https://cve.radiocsirt.org/vuln/fkie_cve-2015-4642 <p>The escapeshellarg function in ext/standard/exec.c in PHP before 5.4.42, 5.5.x before 5.5.26, and 5.6.x before 5.6.10 on Windows allows remote attackers to execute arbitrary OS commands via a crafted string to an application that accepts command-line arguments for a call to the PHP system function.</p> <p>The escapeshellarg function in ext/standard/exec.c in PHP before 5.4.42, 5.5.x before 5.5.26, and 5.6.x before 5.6.10 on Windows allows remote attackers to execute arbitrary OS commands via a crafted string to an application that accepts command-line arguments for a call to the PHP system function.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2015-4642 https://cve.radiocsirt.org/vuln/ghsa-2g3c-3p8m-g2p4 <p>The escapeshellarg function in ext/standard/exec.c in PHP before 5.4.42, 5.5.x before 5.5.26, and 5.6.x before 5.6.10 on Windows allows remote attackers to execute arbitrary OS commands via a crafted string to an application that accepts command-line arguments for a call to the PHP system function.</p> <p>The escapeshellarg function in ext/standard/exec.c in PHP before 5.4.42, 5.5.x before 5.5.26, and 5.6.x before 5.6.10 on Windows allows remote attackers to execute arbitrary OS commands via a crafted string to an application that accepts command-line arguments for a call to the PHP system function.</p> https://cve.radiocsirt.org/vuln/ghsa-2g3c-3p8m-g2p4 https://cve.radiocsirt.org/vuln/gsd-2015-4642 gsd-2015-4642 https://cve.radiocsirt.org/vuln/gsd-2015-4642 https://cve.radiocsirt.org/vuln/jvndb-2015-000101 <p>PHP for Windows contains an OS command injection due to a processing flaw in the escapeshellarg function. Masahiro Yamada reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.</p> <p>PHP for Windows contains an OS command injection due to a processing flaw in the escapeshellarg function. Masahiro Yamada reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.</p> https://cve.radiocsirt.org/vuln/jvndb-2015-000101