A vulnerability list for my project's PHP version. The client would rather not upgrade the PHP version to the last version. Also, it's quite probable that some code will break after the switch from 5.1.6 to 5.3.0. There are, however, two problems I face:
- Some vulnerabilities can't be solved with code, they can be solved only be recompiling PHP with the fixes; I'm forced to rewrite the code to avoid them
- I can't seem to find PoC(proof of concept) for most of the vulnerabilities; how can I know I've fixed them/where the problem is, precisely?
Any advice is greatly appreciated.