CVE-2018-10546 PoC — PHP 安全漏洞

Source

https://github.com/dsfau/CVE-2018-10546

Associated Vulnerability

Title: PHP 安全漏洞 (CVE-2018-10546)
Description:An issue was discovered in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1.x before 7.1.17, and 7.2.x before 7.2.5. An infinite loop exists in ext/iconv/iconv.c because the iconv stream filter does not reject invalid multibyte sequences.

Readme

# CVE-2018-10546
A user can create specially crafted data that, when processed using a stream filter with 'convert.iconv.*', will cause the target application to enter an infinite loop and consume excessive CPU resources [CVE-2018-10546].

The specific impact of these vulnerabilities depends on the applications that use the affected functions or services.

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →