Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-tk4q-pasf-uucd
Vulnerability ID VCID-tk4q-pasf-uucd
Aliases CVE-2018-15132
Summary An issue was discovered in ext/standard/link_win32.c in PHP before 5.6.37, 7.0.x before 7.0.31, 7.1.x before 7.1.20, and 7.2.x before 7.2.8. The linkinfo function on Windows doesn't implement the open_basedir check. This could be abused to find files on paths outside of the allowed directories.
Status Published
Exploitability None
Weighted Severity None
Risk None
Affected and Fixed Packages Package Details
Weaknesses (0)
There are no known CWE.
System Score Found at
epss 0.04902 https://api.first.org/data/v1/epss?cve=CVE-2018-15132
epss 0.04902 https://api.first.org/data/v1/epss?cve=CVE-2018-15132
epss 0.04902 https://api.first.org/data/v1/epss?cve=CVE-2018-15132
epss 0.04902 https://api.first.org/data/v1/epss?cve=CVE-2018-15132
epss 0.04902 https://api.first.org/data/v1/epss?cve=CVE-2018-15132
epss 0.04902 https://api.first.org/data/v1/epss?cve=CVE-2018-15132
epss 0.04902 https://api.first.org/data/v1/epss?cve=CVE-2018-15132
epss 0.04902 https://api.first.org/data/v1/epss?cve=CVE-2018-15132
epss 0.04902 https://api.first.org/data/v1/epss?cve=CVE-2018-15132
epss 0.04902 https://api.first.org/data/v1/epss?cve=CVE-2018-15132
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2018-15132
No exploits are available.
There are no known vectors.
Exploit Prediction Scoring System (EPSS)
Percentile 0.8956
EPSS Score 0.04902
Published At April 1, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-04-01T17:54:22.323165+00:00 EPSS Importer Import https://epss.cyentia.com/epss_scores-current.csv.gz 38.0.0