Lucene search

K
cvelistMitreCVELIST:CVE-2010-1868
HistoryOct 03, 2022 - 4:21 p.m.

CVE-2010-1868

2022-10-0316:21:01
mitre
www.cve.org
8
php
sqlite
vulnerability
uninitialized memory
code execution

AI Score

9.9

Confidence

High

EPSS

0.008

Percentile

81.5%

The (1) sqlite_single_query and (2) sqlite_array_query functions in ext/sqlite/sqlite.c in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allow context-dependent attackers to execute arbitrary code by calling these functions with an empty SQL query, which triggers access of uninitialized memory.

AI Score

9.9

Confidence

High

EPSS

0.008

Percentile

81.5%