VDB
BDU%3A2022-02600
BDU%3A2022-02600
PUBLISHED
CVSS 6.800000190734863 MEDIUM
Уязвимость функции utf8_decode интерпретатора языка программирования PHP, позволяющая нарушителю провести XSS-атаки
Risk Scores
CVSS 2.0
6.800000190734863
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat Inc., Canonical Ltd., Сообщество свободного программного обеспечения, PHP Group | Red Hat Enterprise Linux, Ubuntu, Debian GNU/Linux, PHP |
Timeline
- Apr 27, 2022 CVE Published
- Mar 21, 2026 Distribution Patch
References
- http://www.openwall.com/lists/oss-security/2010/11/02/2 url
- http://sirdarckcat.blogspot.com/2009/10/couple-of-unicode-issues-on-php-and.html url
- http://www.mandriva.com/en/security/advisories?name=MDVSA-2010:224 url
- http://bugs.php.net/bug.php?id=48230 url
- http://us2.php.net/manual/en/function.utf8-decode.php#83935 url
- http://www.openwall.com/lists/oss-security/2010/11/02/8 url
- http://www.openwall.com/lists/oss-security/2010/11/02/11 url
- http://www.acunetix.com/blog/web-security-articles/security-risks-associated-with-utf8_decode/ url
- http://bugs.php.net/bug.php?id=49687 url
- http://www.openwall.com/lists/oss-security/2010/11/02/4 url
- http://www.openwall.com/lists/oss-security/2010/11/02/6 url
- http://www.openwall.com/lists/oss-security/2010/11/03/1 url
- http://www.openwall.com/lists/oss-security/2010/11/02/1 url
- http://www.blackhat.com/presentations/bh-usa-09/VELANAVA/BHUSA09-VelaNava-FavoriteXSS-SLIDES.pdf url
- http://svn.php.net/viewvc?view=revision&revision=304959 url
- http://www.redhat.com/support/errata/RHSA-2010-0919.html url
- http://www.securityfocus.com/bid/44605 url
- http://www.securitytracker.com/id?1024797 url
- http://www.vupen.com/english/advisories/2010/3081 url
- http://secunia.com/advisories/42410 url
…and 16 more