Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
PHP Improper Input Validation Vulnerability - CVE-2007-6039 - Vulnerability Database
PHP

PHP Improper Input Validation Vulnerability - CVE-2007-6039

Low
Reference: CVE-2007-6039
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2007-6039
Title: PHP Improper Input Validation Vulnerability
Overview:

PHP 5.2.5 and earlier allows context-dependent attackers to cause a denial of service (application crash) via a long string in (1) the domain parameter to the dgettext function the message parameter to the (2) dcgettext or (3) gettext function the msgid1 parameter to the (4) dngettext or (5) ngettext function or (6) the classname parameter to the stream_wrapper_register function. NOTE: this might not be a vulnerability in most web server environments that support multiple threads unless this issue can be demonstrated for code execution.