CVE-2010-2094

🗓️ 27 May 2010 22:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov👁 122 Views🌐 WEB

CVE-2010-2094: Format string vulnerabilies in PHP 5.

Reporter	Title	Published	Views	Family All 41
Tenable Nessus	PHP 5.3.x < 5.3.4 Multiple Vulnerabilities	10 Dec 201000:00	–	nessus
Tenable Nessus	PHP 5.3 < 5.3.4 Multiple Vulnerabilities	10 Dec 201000:00	–	nessus
Tenable Nessus	FreeBSD : pecl-phar -- format string vulnerability (da3d381b-0ee6-11e0-becc-0022156e8794)	14 Oct 201100:00	–	nessus
Tenable Nessus	GLSA-201110-06 : PHP: Multiple vulnerabilities	12 Oct 201100:00	–	nessus
Tenable Nessus	PHP 5.3 < 5.3.4 Multiple Vulnerabilities	13 Dec 201000:00	–	nessus
Tenable Nessus	openSUSE Security Update : apache2-mod_php5 (openSUSE-SU-2010:0678-1)	6 Oct 201000:00	–	nessus
Tenable Nessus	openSUSE Security Update : apache2-mod_php5 (openSUSE-SU-2010:0599-1)	13 Sep 201000:00	–	nessus
Tenable Nessus	openSUSE Security Update : apache2-mod_php5 (openSUSE-SU-2010:0599-1)	13 Jun 201400:00	–	nessus
Tenable Nessus	SuSE 11 / 11.1 Security Update : Apache 2 (SAT Patch Numbers 2880 / 2881)	2 Dec 201000:00	–	nessus
Tenable Nessus	SuSE 10 Security Update : Linux kernel (ZYPP Patch Number 7110)	11 Oct 201000:00	–	nessus

NVD

Node

php phpMatch5.3.0

php phpMatch5.3.1

Source	Link
lists	www.lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html
vupen	www.vupen.com/english/advisories/2011/0068
php-security	www.php-security.org/2010/05/14/mops-2010-025-php-phar_wrapper_open_dir-format-string-vulnerability/index.html
lists	www.lists.opensuse.org/opensuse-security-announce/2010-10/msg00000.html
php-security	www.php-security.org/2010/05/14/mops-2010-026-php-phar_wrapper_unlink-format-string-vulnerability/index.html
php-security	www.php-security.org/2010/05/14/mops-2010-027-php-phar_parse_url-format-string-vulnerabilities/index.html
mandriva	www.mandriva.com/security/advisories
php-security	www.php-security.org/2010/05/14/mops-2010-024-php-phar_stream_flush-format-string-vulnerability/index.html
php-security	www.php-security.org/2010/05/14/mops-2010-028-php-phar_wrapper_open_url-format-string-vulnerabilities/index.html

Parameter	Position	Path	Description	CWE
phar:///usr/bin/phar.phar/*%08x-%08x-%08x-%08x-%08x-%08x-%08x-%08x-%08x	path	phar:///usr/bin/phar.phar/*%08x-%08x-%08x-%08x-%08x-%08x-%08x-%08x-%08x	Multiple format-string vulnerabilities in the phar extension in PHP that can lead to arbitrary code execution via crafted phar:// URIs.	CWE-134

16 Jun 2026 23:19Current

9.5Critical risk

Vulners AI Score9.5

CVSS 26.8

EPSS0.12652