Description

This alert was generated using only banner information. It may be a false positive.

PHP have released an upgrade to address multiple vulnerabilities, including integer overflow issues that have been reported to affect PHP4 and bundled software.

Affected PHP versions (up to 4.3.2).

Remediation

Upgrade PHP to the latest version.

References

BID 8693

BUD 8696

PHP Homepage

Related Vulnerabilities

WordPress Plugin WP Shopify Cross-Site Scripting (2.0.4)

XWiki Exposure of Resource to Wrong Sphere Vulnerability (CVE-2023-37911)

WordPress Plugin BackWPup Unspecified Vulnerability (3.4.3)

Apache HTTP Server Other Vulnerability (CVE-1999-1053)

phpMyFAQ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-3469)

Severity

High

Classification

CVE-2003-0860 CVE-2003-0861 CWE-119 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Tags

Missing Update Code Execution Denial Of Service