CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2008-3660

PHP 4.4.x before 4.4.9, and 5.x through 5.2.6, when used as a FastCGI module, allows remote attackers to cause a denial of service (crash) via a request with multiple dots preceding the extension, as demonstrated using foo..php.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.173

EPSS Ranking 94.8%

CVSS Severity

CVSS v2 Score 5.0

References

Products affected by CVE-2008-3660

Php » Php » Version: 4.4.0

cpe:2.3:a:php:php:4.4.0
Php » Php » Version: 4.4.1

cpe:2.3:a:php:php:4.4.1
Php » Php » Version: 4.4.2

cpe:2.3:a:php:php:4.4.2
Php » Php » Version: 4.4.3

cpe:2.3:a:php:php:4.4.3
Php » Php » Version: 4.4.4

cpe:2.3:a:php:php:4.4.4
Php » Php » Version: 4.4.5

cpe:2.3:a:php:php:4.4.5
Php » Php » Version: 4.4.6

cpe:2.3:a:php:php:4.4.6
Php » Php » Version: 4.4.7

cpe:2.3:a:php:php:4.4.7
Php » Php » Version: 4.4.8

cpe:2.3:a:php:php:4.4.8
Php » Php » Version: 5.2.0

cpe:2.3:a:php:php:5.2.0
Php » Php » Version: 5.2.1

cpe:2.3:a:php:php:5.2.1
Php » Php » Version: 5.2.2

cpe:2.3:a:php:php:5.2.2
Php » Php » Version: 5.2.3

cpe:2.3:a:php:php:5.2.3
Php » Php » Version: 5.2.4

cpe:2.3:a:php:php:5.2.4
Php » Php » Version: 5.2.5

cpe:2.3:a:php:php:5.2.5
Php » Php » Version: 5.2.6

cpe:2.3:a:php:php:5.2.6

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2008-3660

Products

Pricing

Contact Us