PHP php_str_replace_in_subject function arbitrary code execution vulnerability

PHP is a general-purpose scripting language that can be embedded in HTML. A security vulnerability exists in the function phpstrreplaceinsubject in PHP ext/standard/string.c. By submitting a specially crafted strireplace function parameter, a remote attacker can execute arbitrary code...