EDB-34950

functional

PHP 5.3.2 - 'xml_utf8_decode()' UTF-8 Input Validation

view exploit source exploit_dbverifiedtype remoteauthor root@80sec.compublished 2009-05-11catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2010-3870USmedium6.8Exploit
The utf8_decode function in PHP before 5.3.4 does not properly handle non-shortest form UTF-8 encoding and ill-formed subsequences in UTF-8 data, which makes it easier for remote a…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan