Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2010-4156

The mb_strcut function in Libmbfl 1.1.0, as used in PHP 5.3.x through 5.3.3, allows context-dependent attackers to obtain potentially sensitive information via a large value of the third parameter (aka the length parameter).
Exploit prediction scoring system (EPSS) score
EPSS Score 0.101
EPSS Ranking 92.7%
CVSS Severity
CVSS v2 Score 5.0
References
Products affected by CVE-2010-4156
  • Php » Php » Version: 5.3.0
    cpe:2.3:a:php:php:5.3.0
  • Php » Php » Version: 5.3.1
    cpe:2.3:a:php:php:5.3.1
  • Php » Php » Version: 5.3.2
    cpe:2.3:a:php:php:5.3.2
  • Php » Php » Version: 5.3.3
    cpe:2.3:a:php:php:5.3.3
  • Scottmac » Libmbfl » Version: 1.1.0
    cpe:2.3:a:scottmac:libmbfl:1.1.0


Contact Us

Shodan ® - All rights reserved