CVE-2007-2748

Published: May 17, 2007Modified: Apr 23, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

The substr_count function in PHP 5.2.1 and earlier allows context-dependent attackers to obtain sensitive information via unspecified vectors, a different affected function than CVE-2007-1375.

Affected (1)

Products: Php: Php

Php

1 product

Php

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Php Php	Up to 5.2.1

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (14)

http://osvdb.org/34730

Source: cve@mitre.org

Broken Link

http://secunia.com/advisories/26895

Source: cve@mitre.org

Third Party Advisory

http://us2.php.net/releases/5_2_2.php

Source: cve@mitre.org

Third Party Advisory

http://www.attrition.org/pipermail/vim/2007-May/001621.html

Source: cve@mitre.org

Third Party Advisory

http://www.mandriva.com/security/advisories?name=MDKSA-2007:187

Source: cve@mitre.org

Third Party Advisory

http://www.novell.com/linux/security/advisories/2007_15_sr.html

Source: cve@mitre.org

Third Party Advisory

http://www.securityfocus.com/bid/24012

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://osvdb.org/34730