{"resultsPerPage":2,"startIndex":0,"totalResults":2,"format":"NVD_CVE","version":"2.0","timestamp":"2026-11-11T06:02:39.496","vulnerabilities":[{"cve":{"id":"CVE-2007-3205","sourceIdentifier":"cve@mitre.org","published":"2007-06-13T10:30:00.000","lastModified":"2026-06-16T22:41:16.190","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The parse_str function in (1) PHP, (2) Hardened-PHP, and (3) Suhosin, when called without a second parameter, might allow remote attackers to overwrite arbitrary variables by specifying variable names and values in the string to be parsed.  NOTE: it is not clear whether this is a design limitation of the function or a bug in PHP, although it is likely to be regarded as a bug in Hardened-PHP and Suhosin."},{"lang":"es","value":"La función parse_str en (1) PHP, (2) Hardened-PHP y (3) Suhosin, cuando se llama sin un segundo parámetro, podría permitir a los atacantes remotos sobrescribir variables arbitrarias mediante la especificación de nombres de variables y valores en la cadena que será analizada. NOTA: no está claro si se trata de una limitación creada en la función o un error en PHP, aunque es probable que sea considerada como un error en Hardened-PHP y Suhosin."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hardened-php_project:hardened-php:*:*:*:*:*:*:*:*","matchCriteriaId":"0527E630-C2D3-44E3-AFD3-1A2CC0AA854C"},{"vulnerable":true,"criteria":"cpe:2.3:a:hardened-php_project:subhosin:*:*:*:*:*:*:*:*","matchCriteriaId":"F7617D0C-23DC-4DEE-AC8E-F2E627C22E5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","matchCriteriaId":"58A8B39D-57DF-4D71-BBCA-1D5A19E0A1B9"}]}]}],"references":[{"url":"http://osvdb.org/39834","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/2800","source":"cve@mitre.org"},{"url":"http://www.acid-root.new.fr/advisories/14070612.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/471178/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/471204/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/471275/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/34836","source":"cve@mitre.org"},{"url":"http://osvdb.org/39834","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/2800","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.acid-root.new.fr/advisories/14070612.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/471178/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/471204/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/471275/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/34836","source":"af854a3a-2127-422b-91ae-364da2661108"}],"vendorComments":[{"organization":"Red Hat","comment":"This is not a security vulnerability: it is the expected behaviour of parse_str when used without a second parameter.","lastModified":"2007-06-26T00:00:00"}]}},{"cve":{"id":"CVE-2013-2220","sourceIdentifier":"secalert@redhat.com","published":"2013-07-31T13:20:27.423","lastModified":"2026-06-16T23:52:58.010","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the radius_get_vendor_attr function in the Radius extension before 1.2.7 for PHP allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large Vendor Specific Attributes (VSA) length value."},{"lang":"es","value":"Desbordamiento de búfer en la función radius_get_vendor_attr en la extensión Radius anterior a 1.2.7 para PHP, permite a atacantes remotos provocar una denegación de servicio (caída) y posiblemente la ejecución de código arbitraria a través de un valor alto en Vendor Specific Attributes (VSA)."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:radius_extension_project:radius:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2.6","matchCriteriaId":"24180799-F1E3-4CED-8E56-8D61A853E613"},{"vulnerable":true,"criteria":"cpe:2.3:a:radius_extension_project:radius:1.1:*:*:*:*:*:*:*","matchCriteriaId":"8510CB61-6237-4771-AA4C-1432670100B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:radius_extension_project:radius:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"58E5F87B-D749-4444-A50B-EF757F7D46D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:radius_extension_project:radius:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"7EF9F81D-6338-4535-A652-CD43A3DE4462"},{"vulnerable":true,"criteria":"cpe:2.3:a:radius_extension_project:radius:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"D6050AA4-E64C-4885-9192-2C7C556A729D"},{"vulnerable":true,"criteria":"cpe:2.3:a:radius_extension_project:radius:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"40531DA1-C74E-464F-A16E-ED903445E527"},{"vulnerable":true,"criteria":"cpe:2.3:a:radius_extension_project:radius:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"76D949BF-4709-4810-84DD-FB583284637B"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","matchCriteriaId":"58A8B39D-57DF-4D71-BBCA-1D5A19E0A1B9"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=714362","source":"secalert@redhat.com"},{"url":"http://pecl.php.net/package/radius/1.2.7","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2013/dsa-2726","source":"secalert@redhat.com"},{"url":"https://github.com/LawnGnome/php-radius/commit/13c149b051f82b709e8d7cc32111e84b49d57234","source":"secalert@redhat.com","tags":["Exploit","Patch"]},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=714362","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://pecl.php.net/package/radius/1.2.7","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2013/dsa-2726","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/LawnGnome/php-radius/commit/13c149b051f82b709e8d7cc32111e84b49d57234","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]}]}}]}