Lucene search
+L

CVE-2006-1490

🗓️ 29 Mar 2006 21:00:00Reported by redhatType 
cve
 cve
🔗 web.nvd.nist.gov👁 122 Views🌐 WEB

PHP before 5.1.3-RC1 allows remote attackers to obtain memory contents via crafted binary data in html_entity_decode function

Related
Detection
Refs
Paths
NVD
Node
OR
phpphpMatch3.0
phpphpMatch3.0.1
phpphpMatch3.0.2
phpphpMatch3.0.3
phpphpMatch3.0.4
phpphpMatch3.0.5
phpphpMatch3.0.6
phpphpMatch3.0.7
phpphpMatch3.0.8
phpphpMatch3.0.9
phpphpMatch3.0.10
phpphpMatch3.0.11
phpphpMatch3.0.12
phpphpMatch3.0.13
phpphpMatch3.0.14
phpphpMatch3.0.15
phpphpMatch3.0.16
phpphpMatch3.0.17
phpphpMatch3.0.18
phpphpMatch4.0.0
phpphpMatch4.0.1
phpphpMatch4.0.1patch1
phpphpMatch4.0.1patch2
phpphpMatch4.0.2
phpphpMatch4.0.3
phpphpMatch4.0.3patch1
phpphpMatch4.0.4
phpphpMatch4.0.5
phpphpMatch4.0.6
phpphpMatch4.0.7
phpphpMatch4.0.7rc1
phpphpMatch4.0.7rc2
phpphpMatch4.0.7rc3
phpphpMatch4.1.0
phpphpMatch4.1.1
phpphpMatch4.1.2
phpphpMatch4.2dev
phpphpMatch4.2.0
phpphpMatch4.2.1
phpphpMatch4.2.2
phpphpMatch4.2.3
phpphpMatch4.3.0
phpphpMatch4.3.1
phpphpMatch4.3.2
phpphpMatch4.3.3
phpphpMatch4.3.4
phpphpMatch4.3.5
phpphpMatch4.3.6
phpphpMatch4.3.7
phpphpMatch4.3.8
phpphpMatch4.3.9
phpphpMatch4.3.10
phpphpMatch4.3.11
phpphpMatch4.4.0
phpphpMatch4.4.1
phpphpMatch4.4.2
phpphpMatch5.0rc1
phpphpMatch5.0rc2
phpphpMatch5.0rc3
phpphpMatch5.0.0
phpphpMatch5.0.0beta1
phpphpMatch5.0.0beta2
phpphpMatch5.0.0beta3
phpphpMatch5.0.0beta4
phpphpMatch5.0.0rc1
phpphpMatch5.0.0rc2
phpphpMatch5.0.0rc3
phpphpMatch5.0.1
phpphpMatch5.0.2
phpphpMatch5.0.3
phpphpMatch5.0.4
phpphpMatch5.0.5
phpphpMatch5.1.0
phpphpMatch5.1.1
phpphpMatch5.1.2
ParameterPositionPathDescriptionCWE
fooquery param/index.phpInformation-disclosure vulnerability via html_entity_decode processing user input and echoing the decoded result, potentially leaking memory contents.CWE-200
faqusernamerequest body/phpmyfaq/admin/index.phpInformation-disclosure vulnerability via html_entity_decode when processing POST data; crafted binary data (e.g., NULL byte) may cause leakage of memory contents.CWE-200

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

16 Jun 2026 22:22Current
6Medium risk
Vulners AI Score6
CVSS 25
EPSS0.20967
122