Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
PHP Other Vulnerability - CVE-2012-3450 - Vulnerability Database
PHP

PHP Other Vulnerability - CVE-2012-3450

Low
Reference: CVE-2012-3450
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2012-3450
Title: PHP Other Vulnerability
Overview:

pdo_sql_parser.re in the PDO extension in PHP before 5.3.14 and 5.4.x before 5.4.4 does not properly determine the end of the query string during parsing of prepared statements which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted parameter value.