The (1) htmlentities and (2) htmlspecialchars functions in PHP before 5.2.5 accept partial multibyte sequences, which has unknown impact and attack vectors, a different issue than CVE-2006-5465.
CVSS Details
- CVSS 3.1 Base Score: 6.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade phpUpgrade php-mysqlUpgrade php-imapUpgrade php-ldapUpgrade php-pgsqlUpgrade php-develUpgrade php-odbc | Dec 1, 2016 | Nov 20, 2007 |
| Oracle_linux | — | Upgrade phpUpgrade php-imapUpgrade php-ldapUpgrade php-snmpUpgrade php-xmlUpgrade php-odbcUpgrade php-pdoUpgrade php-commonUpgrade php-cliUpgrade php-pgsqlUpgrade php-bcmathUpgrade php-ncursesUpgrade php-develUpgrade php-mbstringUpgrade php-soapUpgrade php-xmlrpcUpgrade php-dbaUpgrade php-mysqlUpgrade php-gd | Oct 16, 2024 | Nov 20, 2007 |
| Php | — | Upgrade to PHP version 5.2.5 | Oct 1, 2012 | Nov 20, 2007 |
| Suse | — | Upgrade php4-shmopUpgrade php5-dbaseUpgrade php4-mhashUpgrade php5-suhosinUpgrade php5-bz2Upgrade php5-pspellUpgrade php4-ftpUpgrade php4-gmpUpgrade php5-zlibUpgrade php5-pearUpgrade php5-shmopUpgrade php4-bcmathUpgrade php4-pgsqlUpgrade php5-soapUpgrade php5-gdUpgrade php5-ldapUpgrade php4-mime_magicUpgrade php5-sqliteUpgrade php4-ctypeUpgrade php5-dbaUpgrade php4-fastcgiUpgrade php4-sessionUpgrade php5-ctypeUpgrade php4-iconvUpgrade php5-curlUpgrade php4-domxmlUpgrade php5-calendarUpgrade php4-socketsUpgrade suse-releaseUpgrade php4-gettextUpgrade php5-odbcUpgrade php4-mcalUpgrade php4-sysvsemUpgrade php5-posixUpgrade php4-zlibUpgrade php4-imapUpgrade php4-dbaUpgrade mod_php4-coreUpgrade php5-domUpgrade php5-sysvshmUpgrade php4-curlUpgrade php5-pgsqlUpgrade php5-tokenizerUpgrade php4-wddxUpgrade php5-exifUpgrade php5-opensslUpgrade php4-mysqlUpgrade php5-xmlrpcUpgrade php5-sysvsemUpgrade php5-socketsUpgrade php5-pcntlUpgrade mod_php4-apache2Upgrade php4-mbstringUpgrade php5-xmlreaderUpgrade php5-mcryptUpgrade apache2-mod_php4Upgrade php5-wddxUpgrade php4-exifUpgrade php5-fastcgiUpgrade php4-mcryptUpgrade php5-jsonUpgrade php4-pearUpgrade php5-develUpgrade php4-sysvshmUpgrade php4-qtdomUpgrade php5-xslUpgrade php5-imapUpgrade php5-gettextUpgrade php4-ldapUpgrade php4-snmpUpgrade php5-tidyUpgrade php4-xsltUpgrade php4-develUpgrade php4-swfUpgrade php5-gmpUpgrade php4-dbaseUpgrade php4-bz2Upgrade mod_php4-servletUpgrade php5-mhashUpgrade php5-ftpUpgrade php5-bcmathUpgrade php5-zipUpgrade php5-mbstringUpgrade php4-readlineUpgrade php4-calendarUpgrade php5-mysqlUpgrade php4-gdUpgrade php5-pdoUpgrade apache2-mod_php5Upgrade php4-unixODBCUpgrade php5-xmlwriterUpgrade php5-ncursesUpgrade php5-snmpUpgrade php5-sysvmsgUpgrade php5-hashUpgrade apache-mod_php4Upgrade php4-ypUpgrade php4-recodeUpgrade php4-fileproUpgrade php5-iconv | Feb 17, 2015 | Nov 20, 2007 |
| Ubuntu | — | Upgrade php5-cgiUpgrade php5-cliUpgrade libapache2-mod-php5Upgrade php5-curl | Nov 8, 2024 | Nov 20, 2007 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub