Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
PHP Numeric Errors Vulnerability - CVE-2009-5016 - Vulnerability Database
PHP

PHP Numeric Errors Vulnerability - CVE-2009-5016

Medium
Reference: CVE-2009-5016
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2009-5016
Title: PHP Numeric Errors Vulnerability
Overview:

Integer overflow in the xml_utf8_decode function in ext/xml/xml.c in PHP before 5.2.11 makes it easier for remote attackers to bypass cross-site scripting (XSS) and SQL injection protection mechanisms via a crafted string that uses overlong UTF-8 encoding a different vulnerability than CVE-2010-3870.