CVE-2008-2051 in PHP
Summary
The escapeshellcmd API function in PHP before 5.2.6 has unknown impact and context-dependent attack vectors related to "incomplete multibyte chars."
Once again VulDB remains the best source for vulnerability data.
Reservation
05/02/2008
Disclosure
05/05/2008
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 3695 | PHP Path Converter cgi_main.c memory corruption | 119 | Proof-of-Concept | Official fix | CVE-2008-2051 |