Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

My shared hosting provider uses PHP 5.2.5, which was released at the end of 2007. I would like to know the security holes of PHP 5.2.5. Where I can get them?


share|improve this question

migrated from Dec 16 '10 at 16:18

This question came from our site for professional and enthusiast programmers.

The first one is letting everyone know that the phpinfo file is public on your server – Michael B. Dec 16 '10 at 16:14
Have to agree with @Michael B. - remove that file ASAP. – middaparka Dec 16 '10 at 16:15
Ask your provider to install a more recent version of PHP. The PHP5.2 branch has officially reached End Of Support as of Dec, 16 2010. Everyone is encouraged to upgrade to the PHP 5.3 branch. – Gordon Dec 16 '10 at 16:17
You might be in luck over at aswell – Chris Dale Dec 16 '10 at 16:50
@Michael B., feel free to hack – ilhan Dec 16 '10 at 23:40
up vote 3 down vote accepted

PHP ChangeLog ... check anything above 5.2.5 in 5.2.x series only..

share|improve this answer

Curiously enough, specific security issues aren't often published (otherwise they'd be very easy to exploit), but you can generally get an idea from the changelogs for subsequent releases.

share|improve this answer

Vulnerabilities are on this page:

share|improve this answer

If you are after really long and extensive list go here: security focus, if you are just after publicly available exploits, you may wanna search exploitdb. There is nothing major from what I've seen so far.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.