Description

The html_entity_decode function in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context-dependent attackers to obtain sensitive information (memory contents) or trigger memory corruption by causing a userspace interruption of an internal call, related to the call time pass by reference feature.

Remediation

References

CVE-2010-1860

Related Vulnerabilities

Django Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2022-28346)

WordPress Plugin College publisher Import Arbitrary File Upload (0.1)

MySQL Improper Input Validation Vulnerability (CVE-2017-3273)

WordPress Plugin All in One SEO-Best WordPress SEO-Easily Improve SEO Rankings & Increase Traffic Multiple Vulnerabilities (4.1.5.2)

Oracle Database Server CVE-2010-4423 Vulnerability (CVE-2010-4423)

Severity

Medium

Classification

CVE-2010-1860 CWE-200

Tags

Missing Update Known Vulnerabilities