CVE-2003-0442: php

EPSS trend

Probability

6.98%

Chance of exploitation in the next 30 days

Percentile

94%

Versus all other CVEs

30-day change

0.00 pp

From 6.98% on 18-09-2026

18-09-202618-10-2026

EPSS score

6.98%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

2 found

referenceUnverified
Exploit Reference (shh.thathost.com)
Maturity: unknown
exploit-databaseremotephpVerified
PHP 4.x - Transparent Session ID Cross-Site Scripting
Maturity: weaponized

References

14 links

www.mandriva.com/security/advisories?name=MDKSA-2003:082Vendor AdvisoryX Refsource MANDRAKE
www.securitytracker.com/id?1008653VDB EntryX Refsource SECTRACK
www.securityfocus.com/bid/7761VDB EntryX Refsource BID
distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000691Vendor AdvisoryX Refsource CONECTIVA
shh.thathost.com/secadv/2003-05-11-php.txtX Refsource MISCExploitPatchVendor Advisory
www.debian.org/security/2003/dsa-351Vendor AdvisoryX Refsource DEBIAN
exchange.xforce.ibmcloud.com/vulnerabilities/12259VDB EntryX Refsource XF
marc.info?l=bugtraq&m=105760591228031&w=2Mailing ListX Refsource BUGTRAQ
www.turbolinux.co.jp/security/2003/TLSA-2003-47j.txtVendor AdvisoryX Refsource TURBO
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A485VDB EntrySignatureX Refsource OVAL

Show all 14 references

marc.info?l=bugtraq&m=105449314612963&w=2Mailing ListX Refsource BUGTRAQ
www.osvdb.org/4758VDB EntryX Refsource OSVDB
www.ciac.org/ciac/bulletins/n-112.shtmlThird Party AdvisoryGovernment ResourceX Refsource CIAC
www.redhat.com/support/errata/RHSA-2003-204.htmlVendor AdvisoryX Refsource REDHATPatch

Related vulnerabilities

CVE-2018-19395phpphp4.33%7y ago20-11-2018 21:00ext/standard/var.c in PHP 5.x through 7.1.24 on Windows allows attackers to cause a denial of service (NULL pointer dereference and application crash) because com and com_safearray_proxy return NULL in com_properties_get in ext/com_dotnet/com_handlers.c, as demonstrated by a serialize call on COM("WScript.Shell").CVE-2018-19935alpinephp5+56.28%7y ago07-12-2018 09:00ext/imap/php_imap.c in PHP 5.x and 7.x before 7.3.0 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an empty string in the message argument to the imap_mail function.CVE-2018-19520phpphp+12.92%7y ago25-11-2018 20:00An issue was discovered in SDCMS 1.6 with PHP 5.x. app/admin/controller/themecontroller.php uses a check_bad function in an attempt to block certain PHP functions such as eval, but does not prevent use of preg_replace 'e' calls, allowing users to execute arbitrary code by leveraging access to admin template management.CVE-2018-19396phpphp4.58%7y ago20-11-2018 21:00ext/standard/var_unserializer.c in PHP 5.x through 7.1.24 allows attackers to cause a denial of service (application crash) via an unserialize call for the com, dotnet, or variant class.CVE-2018-19518canonicalubuntu_linux+1896.11%7y ago25-11-2018 10:00University of Washington IMAP Toolkit 2007f on UNIX, as used in imap_open() in PHP and other products, launches an rsh command (by means of the imap_rimap function in c-client/imap4r1.c and the tcp_aopen function in osdep/unix/tcp_unix.c) without preventing argument injection, which might allow remote attackers to execute arbitrary OS commands if the IMAP server name is untrusted input (e.g., entered by a user of a web application) and if rsh has been replaced by a program with different argument semantics. For example, if rsh is a link to ssh (as seen on Debian and Ubuntu systems), then the attack can use an IMAP server name containing a "-oProxyCommand" argument.CVE-2018-20783ubuntuphp5+45.66%7y ago21-02-2019 19:00In PHP before 5.6.39, 7.x before 7.0.33, 7.1.x before 7.1.25, and 7.2.x before 7.2.13, a buffer over-read in PHAR reading functions may allow an attacker to read allocated or unallocated memory past the actual data when trying to parse a .phar file. This is related to phar_parse_pharfile in ext/phar/phar.c.

All vulnerabilities inphp linux

CVE-2003-0442: php

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References