CVE-2010-4700 Information

Share on:

Description

The set_magic_quotes_runtime function in PHP 5.3.2 and 5.3.3 when the MySQLi extension is used does not properly interact with use of the mysqli_fetch_assoc function which might make it easier for context-dependent attackers to conduct SQL injection attacks via crafted input that had been properly handled in earlier PHP versions.

Reference

http://bugs.php.net/52221 http://www.php.net/ChangeLog-5.php http://www.securityfocus.com/bid/46056 https://exchange.xforce.ibmcloud.com/vulnerabilities/64964 https://oval.cisecurity.org/repository/search/definition/oval3Aorg.mitre.oval3Adef3A12620