EDB-27508

functional

PHP 4.x/5.x - 'Html_Entity_Decode()' Information Disclosure

view exploit source exploit_dbverifiedtype remoteauthor Samuelpublished 2006-03-29catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2006-1490USmedium5.0Exploit
PHP before 5.1.3-RC1 might allow remote attackers to obtain portions of memory via crafted binary data sent to a script that processes user input in the html_entity_decode function…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan