PHP Group

Security Scorecard

Score

30F

Total CVEs

70

Patch Rate

0%

0 patched

Avg Response

-

days to patch

Critical Gaps

2

exploitable, no detection

Severity Breakdown

Critical0
High1
Medium1
Low0

Patch Status

Patched0 (0%)
Partial/Workaround0 (0%)
Unpatched70 (100%)

CVEs (70)

CVE IDTitleSeverityScoreDaysPatch
CVE-2016-7849CVE-2016-7849 - Unpatched PHP File Inclusion VulnerabilityN/A-3145dUnpatched
CVE-2016-8262Uninitialized Pointer Dereference in PHPN/A-3145dUnpatched
CVE-2016-8524CVE-2016-8524 (Unpatched PHP Mail Function)N/A-3145dUnpatched
CVE-2016-9508CVE-2016-9508: Unpatched Remote File Inclusion VulnerabilityN/A-3145dUnpatched
CVE-2016-9475CVE-2016-9475 - Unpatched PHP Session Fixation VulnerabilityN/A-3145dUnpatched
CVE-2016-4347CVE-2016-4347 - Unauthenticated Remote File Inclusion VulnerabilityN/A-3481dUnpatched
CVE-2012-3541CVE-2012-3541 - Unpatched PHP Version VulnerabilityN/A-3948dUnpatched
CVE-2014-9246CVE-2014-9246: "Buffer Overflow in PHP's curl extension"N/A-4019dUnpatched
CVE-2014-5814Unpatched PHPMailer VulnerabilityN/A-4116dUnpatched
CVE-2013-5624Uninitialized Pointer Dereference in PHPN/A-4473dUnpatched