blogsafe.org My Downloads

BlogSafe.org

PHP CVEs

Vulnerabilities in the PHP language itself, and which PHP versions they affect.

← Back to CVE list

CVE-2004-0958

MEDIUM 5.0 CVSS 2.0
Published
November 3, 2004
Last modified
June 16, 2026
NVD status
Modified
Reported by
cve@mitre.org
CVSS vector
AV:N/AC:L/Au:N/C:P/I:N/A:N

Description

php_variables.c in PHP before 5.0.2 allows remote attackers to read sensitive memory contents via (1) GET, (2) POST, or (3) COOKIE GPC variables that end in an open bracket character, which causes PHP to calculate an incorrect string length.

Affected products and versions

  • PHP — Up to and including 5.0.2

References