CVE-2004-0958

php_variables.c in PHP before 5.0.2 allows remote attackers to read sensitive memory contents via (1) GET, (2) POST, or (3) COOKIE GPC variables that end in an open bracket character, which causes PHP to calculate an incorrect string length.

CVSS v2.0

5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS

9.73% chance of exploitation in the next 30 days, 95th percentile

Published

2004-10-16

Updated

2024-08-08

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/24656

References

• CVE Record
• NVD entry

Related

• CVE-2004-0953
• CVE-2004-0964
• CVE-2004-0942
• CVE-2004-0989
• CVE-2004-0940
• CVE-2004-0990