Unrated severityNVD Advisory· Published May 17, 2007· Updated Jun 16, 2026

CVE-2007-2748

Description

The substr_count function in PHP 5.2.1 and earlier allows context-dependent attackers to obtain sensitive information via unspecified vectors, a different affected function than CVE-2007-1375.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

PHP/PHP2 versions
cpe:2.3:a:php:php:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:php:php:*:*:*:*:*:*:*:*range: <=5.2.1
- (no CPE)range: <=5.2.1

Patches

Vulnerability mechanics

References

secunia.com/advisories/26895nvdThird Party Advisory
us2.php.net/releases/5_2_2.phpnvdThird Party Advisory
www.attrition.org/pipermail/vim/2007-May/001621.htmlnvdThird Party Advisory
www.mandriva.com/security/advisoriesnvdThird Party Advisory
www.novell.com/linux/security/advisories/2007_15_sr.htmlnvdThird Party Advisory
www.securityfocus.com/bid/24012nvdThird Party AdvisoryVDB Entry
osvdb.org/34730nvdBroken Link

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000