CVE-2007-2748

MEDIO 4.3CVE-2007-2748 · Published 17/05/2007 · updated 16/06/2026

En resumen

CVE-2007-2748 es una vulnerabilidad MEDIO (CVSS 4.3) que afecta a php (php).
Probabilidad de explotación en los próximos 30 días (EPSS): 1.4%, mayor que el 72.6% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
php php	`≤ 5.2.1`	No fix yet

Description

The substr_count function in PHP 5.2.1 and earlier allows context-dependent attackers to obtain sensitive information via unspecified vectors, a different affected function than CVE-2007-1375.

References

osvdb.org/34730 · Broken Link
secunia.com/advisories/26895 · Third Party Advisory
us2.php.net/releases/5_2_2.php · Third Party Advisory
attrition.org/pipermail/vim/2007-May/001621.html · Third Party Advisory
mandriva.com/security/advisories · Third Party Advisory
novell.com/linux/security/advisories/2007_15_sr.html · Third Party Advisory
securityfocus.com/bid/24012 · Third Party Advisory

Más vulnerabilidades de php

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

php

≤ 5.2.1

No fix yet

Más vulnerabilidades de php

Ver todo →