Exploit for #VU110314 Cross-site scripting in PHP

Vulnerability identifier: #VU110314

Vulnerability risk: Medium

CVSSv4.0: N/A

CVE-ID: CVE-2009-4142

CWE-ID: CWE-79

Exploitation vector: Network

Exploits in database: 2

• June 9, 2025
  • PHP 5.2.11 - 'htmlspecialCharacters()' Malformed Multibyte Character Cross-Site Scripting (1) [Exploit-DB]
  • PHP 5.2.11 - 'htmlspecialCharacters()' Malformed Multibyte Character Cross-Site Scripting (2) [Exploit-DB]

Vulnerable software:
PHP
Universal components / Libraries / Scripting languages

Vendor: PHP Group