CVE-2007-2748

Опубликовано: 17 мая 2007

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

The substr_count function in PHP 5.2.1 and earlier allows context-dependent attackers to obtain sensitive information via unspecified vectors, a different affected function than CVE-2007-1375.

Ссылки

http://osvdb.org/34730
Broken Link
http://secunia.com/advisories/26895
Third Party Advisory
http://us2.php.net/releases/5_2_2.php
Third Party Advisory
http://www.attrition.org/pipermail/vim/2007-May/001621.html
Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2007:187
Third Party Advisory
http://www.novell.com/linux/security/advisories/2007_15_sr.html
Third Party Advisory
http://www.securityfocus.com/bid/24012
Third Party Advisory
VDB Entry
http://osvdb.org/34730
Broken Link
http://secunia.com/advisories/26895
Third Party Advisory
http://us2.php.net/releases/5_2_2.php
Third Party Advisory
http://www.attrition.org/pipermail/vim/2007-May/001621.html
Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2007:187
Third Party Advisory
http://www.novell.com/linux/security/advisories/2007_15_sr.html
Third Party Advisory
http://www.securityfocus.com/bid/24012
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:php:php:*:*:*:*:*:*:*:*

Версия до 5.2.1 (включая)

EPSS

Процентиль: 66%

0.00525

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-200

Связанные уязвимости

CVE-2007-2748

ubuntu

около 18 лет назад

The substr_count function in PHP 5.2.1 and earlier allows context-dependent attackers to obtain sensitive information via unspecified vectors, a different affected function than CVE-2007-1375.

CVE-2007-2748

debian

около 18 лет назад

The substr_count function in PHP 5.2.1 and earlier allows context-depe ...

GHSA-hxx4-229m-wgjj

github

около 3 лет назад

The substr_count function in PHP 5.2.1 and earlier allows context-dependent attackers to obtain sensitive information via unspecified vectors, a different affected function than CVE-2007-1375.

EPSS

Процентиль: 66%

0.00525

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-200