EDB-34979

functional

PHP 5.3.x - 'mb_strcut()' Information Disclosure

view exploit source exploit_dbverifiedtype remoteauthor Mateusz Kocielskipublished 2010-11-07catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2010-4156USmedium5.0Exploit
The mb_strcut function in Libmbfl 1.1.0, as used in PHP 5.3.x through 5.3.3, allows context-dependent attackers to obtain potentially sensitive information via a large value of the…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan