CVEvulnerability

CVE-2009-0754

2.1 LOW Published 2009-03-03 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2009-03-03
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
2.1 LOW — AV:L/AC:L/Au:N/C:N/I:P/A:N
Weaknesses
CWE-134

Description

PHP 4.4.4, 5.1.6, and other versions, when running on Apache, allows local users to modify behavior of other sites hosted on the same web server by modifying the mbstring.func_overload setting within .htaccess, which causes this setting to be applied to other virtual hosts on the same server.

Affected configurations

• php php 4.4.4 • php php 5.1.6

Related

Weakness · CWE (1)

  • CWE-134 Use of Externally-Controlled Format String weakness

References