NVD

Id
13361  
Name
CVE-2010-1868  
Description
The (1) sqlite_single_query and (2) sqlite_array_query functions in ext/sqlite/sqlite.c in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allow context-dependent attackers to execute arbitrary code by calling these functions with an empty SQL query, which triggers access of uninitialized memory.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2010-05-07  
Modified Date
2010-05-11  
Seq
2010-1868  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
73996 13361 CVE-2010-1868 http://php-security.org/2010/05/07/mops-2010-012-php-sqlite_single_query-uninitialized-memory-usage-vulnerability/index.html  View
73997 13361 CVE-2010-1868 http://php-security.org/2010/05/07/mops-2010-013-php-sqlite_array_query-uninitialized-memory-usage-vulnerability/index.html  View
73998 13361 CVE-2010-1868 http://php-security.org/2010/05/07/mops-submission-03-sqlite_single_query-sqlite_array_query-uninitialized-memory-usage/index.html  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
36058 JVNDB-2010-001838 PHP の sqlite_single_query および sqlite_array_query 関数における任意のコードを実行される脆弱性 PHP の ext/sqlite/sqlite.c 内にある sqlite_single_query および sqlite_array_query 関数には、空の SQL クエリに関する処理に不備があるため、任意のコードを実行される脆弱性が存在します。 CVE-2010-1868 44448 CVE-2010-1868 13361 7.5 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001838.html 2010-05-07 2010-08-18 View