3 matches found
EUVD-2009-4974
Malware in sbrugna...
6.8CVSS6AI score0.02652EPSS
SaveExploits1References20
Integer overflow
Integer overflow in the xmlutf8decode function in ext/xml/xml.c in PHP before 5.2.11 makes it easier for remote attackers to bypass cross-site scripting XSS and SQL injection protection mechanisms via a crafted string that uses overlong UTF-8 encoding, a different vulnerability than CVE-2010-3870...
6.8CVSS6.9AI score0.11281EPSS
SaveExploits3References15Affected Software1
CVE-2009-5016
Integer overflow in the xmlutf8decode function in ext/xml/xml.c in PHP before 5.2.11 makes it easier for remote attackers to bypass cross-site scripting XSS and SQL injection protection mechanisms via a crafted string that uses overlong UTF-8 encoding, a different vulnerability than CVE-2010-3870...
8AI score0.02652EPSS
SaveExploits1References15
20