Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
php_variables.c in PHP before 5.0.2 allows remote attackers to read sensitive memory contents via (1) GET, (2) POST, or (3) COOKIE GPC variables that end in an open bracket character, which causes PHP to calculate an incorrect string length.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
PHP PHP_Variables远程内存泄露漏洞
Vulnerability Description
PHP是一种流行的WEB服务器端编程语言。 PHP中由于php_variables.c的错误数组解析，远程攻击者可以利用这个漏洞获得PHP代码或者部分内存数据。 通过在追加一个GET/POST/COOKIE变量数组后追加一个'['，如abc[a][，'a'数组元素长度设置为变量名strlen("abc")长度变量，可导致服务程序返回部分内存信息给攻击者，可能导致敏感信息泄露。
CVSS Information
N/A
Vulnerability Type
N/A