| Package | Affected versions | Patched versions |
|---|---|---|
| php | = 4.4.0= 4.4.1= 4.4.2= 4.4.3= 4.4.4= 4.4.5= 4.4.6= 4.4.7= 4.4.8= 5.2.0= 5.2.1= 5.2.2= 5.2.3= 5.2.4= 5.2.5= 5.2.6 |
PHP 4.4.x before 4.4.9, and 5.x through 5.2.6, when used as a FastCGI module, allows remote attackers to cause a denial of service (crash) via a request with multiple dots preceding the extension, as demonstrated using foo..php.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free