CVE-2007-2748: Infoleak
Published May 17, 2007
·Updated
The substrcount function in PHP 5.2.1 and earlier allows context-dependent attackers to obtain sensitive information via unspecified vectors, a different affected function than CVE-2007-1375.
Affected Software
1 affected component
PHP PHP<=5.2.1
Event History
May 17, 2007
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Frequently Asked Questions
1
Which PHP versions need remediation?
PHP 5.2.1 and earlier are affected. The issue was addressed in the PHP 5.2.2 release.
2
What access and conditions does an attacker need?
Exploitation is network-accessible and requires no authentication, but the attack complexity is rated medium and depends on unspecified context-dependent vectors.
3
What is the expected impact if exploitation succeeds?
The available information identifies sensitive-information disclosure only; it does not indicate an integrity or availability impact.