Description

PHP before 5.3.7 does not properly implement the error_log function, which allows context-dependent attackers to cause a denial of service (application crash) via unspecified vectors.

Remediation

References

CVE-2011-3267

Related Vulnerabilities

Internet Information Services Other Vulnerability (CVE-2000-0457)

phpList Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-2741)

WordPress Plugin Contact Form to DB by BestWebSoft-Messages Database For WordPress Cross-Site Scripting (1.4.0)

Oracle Application Server Other Vulnerability (CVE-2006-5362)

Magento Improper Authorization Vulnerability (CVE-2020-24402)

Severity

Medium

Classification

CVE-2011-3267

Tags

Missing Update Known Vulnerabilities