PHP html_entity_decode() information leak
Published:		29.03.2006
Source:		BUGTRAQ
SecurityVulns ID:		5956
Type:		remote
Level:		6/10
Description:		Iinvalid processing of non-printable characters allows to access memory content.

Affected:		PHP : PHP 4.4
		PHP : PHP 5.1

Original document		Stefan Esser, Re: [Full-disclosure] Critical PHP bug - act ASAP if you are running web with sensitive data (29.03.2006)
		SECUNIA, [SA19383] PHP "html_entity_decode()" Information Disclosure Vulnerability (29.03.2006)

Discuss:

Read or add your comments to this news (0 comments)