The (1) htmlentities and (2) htmlspecialchars functions in PHP before 5.2.5 accept partial multibyte sequences, which has unknown impact and attack vectors, a different issue than CVE-2006-5465.
CVSS Details
- CVSS 3.1 Base Score: 6.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade php-odbcUpgrade php-imapUpgrade phpUpgrade php-pgsqlUpgrade php-ldapUpgrade php-develUpgrade php-mysql | Dec 1, 2016 | Nov 20, 2007 |
| Oracle_linux | — | Upgrade php-soapUpgrade php-xmlrpcUpgrade php-mysqlUpgrade php-gdUpgrade php-dbaUpgrade php-mbstringUpgrade php-develUpgrade php-ncursesUpgrade php-snmpUpgrade php-commonUpgrade php-pdoUpgrade php-imapUpgrade php-cliUpgrade php-odbcUpgrade phpUpgrade php-pgsqlUpgrade php-xmlUpgrade php-ldapUpgrade php-bcmath | Oct 16, 2024 | Nov 20, 2007 |
| Php | — | Upgrade to PHP version 5.2.5 | Oct 1, 2012 | Nov 20, 2007 |
| Suse | — | Upgrade php5-imapUpgrade php4-ypUpgrade php4-gdUpgrade php4-sysvshmUpgrade php5-xslUpgrade apache-mod_php4Upgrade php5-mhashUpgrade php4-mbstringUpgrade mod_php4-apache2Upgrade php5-opensslUpgrade php5-bcmathUpgrade php5-xmlreaderUpgrade php4-qtdomUpgrade php5-wddxUpgrade php5-snmpUpgrade apache2-mod_php4Upgrade php4-calendarUpgrade php5-exifUpgrade php4-dbaseUpgrade php5-pcntlUpgrade php4-recodeUpgrade php4-bz2Upgrade php4-swfUpgrade php5-gmpUpgrade php4-develUpgrade php4-xsltUpgrade php4-mysqlUpgrade php4-fileproUpgrade php5-mysqlUpgrade php5-socketsUpgrade php5-iconvUpgrade php4-exifUpgrade apache2-mod_php5Upgrade php5-ftpUpgrade php4-ldapUpgrade php5-sysvsemUpgrade php5-gettextUpgrade php5-fastcgiUpgrade mod_php4-servletUpgrade php5-mcryptUpgrade php4-unixODBCUpgrade php5-ncursesUpgrade php5-pdoUpgrade php4-readlineUpgrade php5-sysvmsgUpgrade php4-pearUpgrade php4-snmpUpgrade php5-jsonUpgrade php5-xmlrpcUpgrade php5-tidyUpgrade php4-mcryptUpgrade php5-hashUpgrade php5-mbstringUpgrade php5-develUpgrade php5-xmlwriterUpgrade php5-zipUpgrade php5-sysvshmUpgrade mod_php4-coreUpgrade php5-ldapUpgrade php5-pearUpgrade php5-calendarUpgrade php5-domUpgrade php4-iconvUpgrade php5-odbcUpgrade php4-dbaUpgrade php4-mime_magicUpgrade php4-sessionUpgrade php5-dbaseUpgrade php4-bcmathUpgrade php5-suhosinUpgrade php4-mhashUpgrade suse-releaseUpgrade php5-shmopUpgrade php4-ctypeUpgrade php4-ftpUpgrade php5-zlibUpgrade php4-shmopUpgrade php4-pgsqlUpgrade php4-gmpUpgrade php5-pgsqlUpgrade php4-curlUpgrade php5-pspellUpgrade php5-sqliteUpgrade php4-sysvsemUpgrade php4-gettextUpgrade php5-tokenizerUpgrade php4-mcalUpgrade php4-zlibUpgrade php5-curlUpgrade php4-wddxUpgrade php5-posixUpgrade php4-imapUpgrade php5-ctypeUpgrade php4-fastcgiUpgrade php4-domxmlUpgrade php5-bz2Upgrade php5-dbaUpgrade php5-soapUpgrade php5-gdUpgrade php4-sockets | Feb 17, 2015 | Nov 20, 2007 |
| Ubuntu | — | Upgrade libapache2-mod-php5Upgrade php5-cliUpgrade php5-cgiUpgrade php5-curl | Nov 8, 2024 | Nov 20, 2007 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub