Description

The substr_count function in PHP 5.2.1 and earlier allows context-dependent attackers to obtain sensitive information via unspecified vectors, a different affected function than CVE-2007-1375.

Remediation

References

CVE-2007-2748

Related Vulnerabilities

MediaWiki CVE-2022-28205 Vulnerability (CVE-2022-28205)

XOOPS Improper Link Resolution Before File Access ('Link Following') Vulnerability (CVE-2008-0613)

Serendipity Permissions, Privileges, and Access Controls Vulnerability (CVE-2010-1916)

Dot CMS Insertion of Sensitive Information into Log File Vulnerability (CVE-2024-3165)

SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-0949)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-200 CVE-2007-2748