Back to CVE Browser

CVE-2006-4485

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.1880%

EPSS Percentile20.69th

PublishedAug 31, 2006

Last ModifiedApr 16, 2026

Vulnerability Description

The stripos function in PHP before 5.1.5 has unknown impact and attack vectors related to an out-of-bounds read.

Affected Platforms (CPE)

📦

Php

Php

= 5.1.0

📦

Php

Php

= 5.1.1

📦

Php

Php

= 5.1.2

📦

Php

Php

= 5.1.4

References & Advisories

🔗 http://rhn.redhat.com/errata/RHSA-2006-0688.html

🔗 http://secunia.com/advisories/21546

🔗 http://secunia.com/advisories/21842

🔗 http://secunia.com/advisories/22331

🔗 http://secunia.com/advisories/22538

🔗 http://securitytracker.com/id?1016984

🔗 http://support.avaya.com/elmodocs2/security/ASA-2006-223.htm

🔗 http://www.mandriva.com/security/advisories?name=MDKSA-2006:162

Related Vulnerabilities

CVE-2020-2521310.0

The File Manager (wp-file-manager) plugin before 6.9 for WordPress allows remote attackers to upload and execute arbitrary PHP cod...

CVE-2020-2418610.0

A Remote Code Execution vulnerability exists in the gVectors wpDiscuz plugin 7.0 through 7.0.4 for WordPress, which allows unauthe...

CVE-2020-896710.0

There is an improper Neutralization of Special Elements used in an SQL Command (SQL Injection) vulnerability in php files of GESIO...

CVE-2020-3594910.0

An issue was discovered in the Quiz and Survey Master plugin before 7.0.1 for WordPress. It made it possible for unauthenticated a...