Show filters
1 Total Results
Displaying 1-1 of 1
Sort by:
Attacker Value
Very High
CVE-2008-0599
Disclosure Date: May 05, 2008 (last updated February 03, 2024)
The init_request_info function in sapi/cgi/cgi_main.c in PHP before 5.2.6 does not properly consider operator precedence when calculating the length of PATH_TRANSLATED, which might allow remote attackers to execute arbitrary code via a crafted URI.
0
