CVE-2010-4700: PHP

Medium severity, CVSS 6.8. EPSS: 1.5% chance of exploitation in the next 30 days.

The set_magic_quotes_runtime function in PHP 5.3.2 and 5.3.3, when the MySQLi extension is used, does not properly interact with use of the mysqli_fetch_assoc function, which might make it easier for context-dependent attackers to conduct SQL injection attacks via crafted input that had been properly handled in earlier PHP versions.

Affected products

• PHP PHP: version 5.3.2 only; version 5.3.3 only

Published 2011-01-18. Last modified 2026-06-16.