VULNERABILITY INTELLIGENCE
CVE-2004-0958
CVSS score5 MEDIUM
EPSS probability9.73%
CISA KEVNot currently listed
Published2004-11-03
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:N/A:N
Description
php_variables.c in PHP before 5.0.2 allows remote attackers to read sensitive memory contents via (1) GET, (2) POST, or (3) COOKIE GPC variables that end in an open bracket character, which causes PHP to calculate an incorrect string length.