CVE-2010-3870

The utf8_decode function in PHP before 5.3.4 does not properly handle non-shortest form UTF-8...

6.8 MediumPublic exploit

The utf8_decode function in PHP before 5.3.4 does not properly handle non-shortest form UTF-8 encoding and ill-formed subsequences in UTF-8 data, which makes it easier for remote attackers to bypass cross-site scripting (XSS) and SQL injection protection mechanisms via a crafted string.

Exploit likelihood

11.3%Up 5.8 points since Feb 4, 2022

What each source reports

NVD Score used 6.8

Record: CVE-2010-3870
CVSS 2.0: 6.8 MediumAV:N/AC:M/Au:N/C:P/I:P/A:P
Weakness: CWE-20
Updated: 2026-11-02

CVE List No score

Record: CVE-2010-3870
Updated: 2026-11-02

EUVDEUVD-2010-3848 No score

Record: EUVD-2010-3848
Updated: 2026-11-03

GitHub AdvisoriesGHSA-gvvf-r2h9-2v8x No score

The utf8_decode function in PHP before 5.3.4 does not properly handle non-shortest form UTF-8...

Record: GHSA-gvvf-r2h9-2v8x
Weakness: CWE-20
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`php5` Debian:5.0 From an advisory covering 6 CVEs	before 5.2.6.dfsg.1-1+lenny10, plus listed versions 5.2.6.dfsg.1-1+lenny25.2.6.dfsg.1-1+lenny35.2.6.dfsg.1-1+lenny45.2.6.dfsg.1-1+lenny65.2.6.dfsg.1-1+lenny85.2.6.dfsg.1-1+lenny9	5.2.6.dfsg.1-1+lenny10
`php5` Debian:6.0 From an advisory covering 6 CVEs	before 5.3.3-7+squeeze1, plus listed versions 5.3.3-7	5.3.3-7+squeeze1
`php` Red Hat:enterprise_linux:4::as From an advisory covering 7 CVEs	before 0:4.3.9-3.31	0:4.3.9-3.31
`php-debuginfo` Red Hat:enterprise_linux:4::as From an advisory covering 7 CVEs	before 0:4.3.9-3.31	0:4.3.9-3.31
`php-devel` Red Hat:enterprise_linux:4::as From an advisory covering 7 CVEs	before 0:4.3.9-3.31	0:4.3.9-3.31
`php-domxml` Red Hat:enterprise_linux:4::as From an advisory covering 7 CVEs	before 0:4.3.9-3.31	0:4.3.9-3.31
`php-gd` Red Hat:enterprise_linux:4::as From an advisory covering 7 CVEs	before 0:4.3.9-3.31	0:4.3.9-3.31
`php-imap` Red Hat:enterprise_linux:4::as From an advisory covering 7 CVEs	before 0:4.3.9-3.31	0:4.3.9-3.31
`php-ldap` Red Hat:enterprise_linux:4::as From an advisory covering 7 CVEs	before 0:4.3.9-3.31	0:4.3.9-3.31
`php-mbstring` Red Hat:enterprise_linux:4::as From an advisory covering 7 CVEs	before 0:4.3.9-3.31	0:4.3.9-3.31

Show 200 moreShow less

Affected packages
Package	Affected	Fixed
`php-mysql` Red Hat:enterprise_linux:4::as From an advisory covering 7 CVEs	before 0:4.3.9-3.31	0:4.3.9-3.31
`php-ncurses` Red Hat:enterprise_linux:4::as From an advisory covering 7 CVEs	before 0:4.3.9-3.31	0:4.3.9-3.31
`php-odbc` Red Hat:enterprise_linux:4::as From an advisory covering 7 CVEs	before 0:4.3.9-3.31	0:4.3.9-3.31
`php-pear` Red Hat:enterprise_linux:4::as From an advisory covering 7 CVEs	before 0:4.3.9-3.31	0:4.3.9-3.31
`php-pgsql` Red Hat:enterprise_linux:4::as From an advisory covering 7 CVEs	before 0:4.3.9-3.31	0:4.3.9-3.31
`php-snmp` Red Hat:enterprise_linux:4::as From an advisory covering 7 CVEs	before 0:4.3.9-3.31	0:4.3.9-3.31
`php-xmlrpc` Red Hat:enterprise_linux:4::as From an advisory covering 7 CVEs	before 0:4.3.9-3.31	0:4.3.9-3.31
`php` Red Hat:enterprise_linux:4::desktop From an advisory covering 7 CVEs	before 0:4.3.9-3.31	0:4.3.9-3.31
`php-debuginfo` Red Hat:enterprise_linux:4::desktop From an advisory covering 7 CVEs	before 0:4.3.9-3.31	0:4.3.9-3.31
`php-devel` Red Hat:enterprise_linux:4::desktop From an advisory covering 7 CVEs	before 0:4.3.9-3.31	0:4.3.9-3.31
`php-domxml` Red Hat:enterprise_linux:4::desktop From an advisory covering 7 CVEs	before 0:4.3.9-3.31	0:4.3.9-3.31
`php-gd` Red Hat:enterprise_linux:4::desktop From an advisory covering 7 CVEs	before 0:4.3.9-3.31	0:4.3.9-3.31
`php-imap` Red Hat:enterprise_linux:4::desktop From an advisory covering 7 CVEs	before 0:4.3.9-3.31	0:4.3.9-3.31
`php-ldap` Red Hat:enterprise_linux:4::desktop From an advisory covering 7 CVEs	before 0:4.3.9-3.31	0:4.3.9-3.31
`php-mbstring` Red Hat:enterprise_linux:4::desktop From an advisory covering 7 CVEs	before 0:4.3.9-3.31	0:4.3.9-3.31
`php-mysql` Red Hat:enterprise_linux:4::desktop From an advisory covering 7 CVEs	before 0:4.3.9-3.31	0:4.3.9-3.31
`php-ncurses` Red Hat:enterprise_linux:4::desktop From an advisory covering 7 CVEs	before 0:4.3.9-3.31	0:4.3.9-3.31
`php-odbc` Red Hat:enterprise_linux:4::desktop From an advisory covering 7 CVEs	before 0:4.3.9-3.31	0:4.3.9-3.31
`php-pear` Red Hat:enterprise_linux:4::desktop From an advisory covering 7 CVEs	before 0:4.3.9-3.31	0:4.3.9-3.31
`php-pgsql` Red Hat:enterprise_linux:4::desktop From an advisory covering 7 CVEs	before 0:4.3.9-3.31	0:4.3.9-3.31
`php-snmp` Red Hat:enterprise_linux:4::desktop From an advisory covering 7 CVEs	before 0:4.3.9-3.31	0:4.3.9-3.31
`php-xmlrpc` Red Hat:enterprise_linux:4::desktop From an advisory covering 7 CVEs	before 0:4.3.9-3.31	0:4.3.9-3.31
`php` Red Hat:enterprise_linux:4::es From an advisory covering 7 CVEs	before 0:4.3.9-3.31	0:4.3.9-3.31
`php-debuginfo` Red Hat:enterprise_linux:4::es From an advisory covering 7 CVEs	before 0:4.3.9-3.31	0:4.3.9-3.31
`php-devel` Red Hat:enterprise_linux:4::es From an advisory covering 7 CVEs	before 0:4.3.9-3.31	0:4.3.9-3.31
`php-domxml` Red Hat:enterprise_linux:4::es From an advisory covering 7 CVEs	before 0:4.3.9-3.31	0:4.3.9-3.31
`php-gd` Red Hat:enterprise_linux:4::es From an advisory covering 7 CVEs	before 0:4.3.9-3.31	0:4.3.9-3.31
`php-imap` Red Hat:enterprise_linux:4::es From an advisory covering 7 CVEs	before 0:4.3.9-3.31	0:4.3.9-3.31
`php-ldap` Red Hat:enterprise_linux:4::es From an advisory covering 7 CVEs	before 0:4.3.9-3.31	0:4.3.9-3.31
`php-mbstring` Red Hat:enterprise_linux:4::es From an advisory covering 7 CVEs	before 0:4.3.9-3.31	0:4.3.9-3.31
`php-mysql` Red Hat:enterprise_linux:4::es From an advisory covering 7 CVEs	before 0:4.3.9-3.31	0:4.3.9-3.31
`php-ncurses` Red Hat:enterprise_linux:4::es From an advisory covering 7 CVEs	before 0:4.3.9-3.31	0:4.3.9-3.31
`php-odbc` Red Hat:enterprise_linux:4::es From an advisory covering 7 CVEs	before 0:4.3.9-3.31	0:4.3.9-3.31
`php-pear` Red Hat:enterprise_linux:4::es From an advisory covering 7 CVEs	before 0:4.3.9-3.31	0:4.3.9-3.31
`php-pgsql` Red Hat:enterprise_linux:4::es From an advisory covering 7 CVEs	before 0:4.3.9-3.31	0:4.3.9-3.31
`php-snmp` Red Hat:enterprise_linux:4::es From an advisory covering 7 CVEs	before 0:4.3.9-3.31	0:4.3.9-3.31
`php-xmlrpc` Red Hat:enterprise_linux:4::es From an advisory covering 7 CVEs	before 0:4.3.9-3.31	0:4.3.9-3.31
`php` Red Hat:enterprise_linux:4::ws From an advisory covering 7 CVEs	before 0:4.3.9-3.31	0:4.3.9-3.31
`php-debuginfo` Red Hat:enterprise_linux:4::ws From an advisory covering 7 CVEs	before 0:4.3.9-3.31	0:4.3.9-3.31
`php-devel` Red Hat:enterprise_linux:4::ws From an advisory covering 7 CVEs	before 0:4.3.9-3.31	0:4.3.9-3.31
`php-domxml` Red Hat:enterprise_linux:4::ws From an advisory covering 7 CVEs	before 0:4.3.9-3.31	0:4.3.9-3.31
`php-gd` Red Hat:enterprise_linux:4::ws From an advisory covering 7 CVEs	before 0:4.3.9-3.31	0:4.3.9-3.31
`php-imap` Red Hat:enterprise_linux:4::ws From an advisory covering 7 CVEs	before 0:4.3.9-3.31	0:4.3.9-3.31
`php-ldap` Red Hat:enterprise_linux:4::ws From an advisory covering 7 CVEs	before 0:4.3.9-3.31	0:4.3.9-3.31
`php-mbstring` Red Hat:enterprise_linux:4::ws From an advisory covering 7 CVEs	before 0:4.3.9-3.31	0:4.3.9-3.31
`php-mysql` Red Hat:enterprise_linux:4::ws From an advisory covering 7 CVEs	before 0:4.3.9-3.31	0:4.3.9-3.31
`php-ncurses` Red Hat:enterprise_linux:4::ws From an advisory covering 7 CVEs	before 0:4.3.9-3.31	0:4.3.9-3.31
`php-odbc` Red Hat:enterprise_linux:4::ws From an advisory covering 7 CVEs	before 0:4.3.9-3.31	0:4.3.9-3.31
`php-pear` Red Hat:enterprise_linux:4::ws From an advisory covering 7 CVEs	before 0:4.3.9-3.31	0:4.3.9-3.31
`php-pgsql` Red Hat:enterprise_linux:4::ws From an advisory covering 7 CVEs	before 0:4.3.9-3.31	0:4.3.9-3.31
`php-snmp` Red Hat:enterprise_linux:4::ws From an advisory covering 7 CVEs	before 0:4.3.9-3.31	0:4.3.9-3.31
`php-xmlrpc` Red Hat:enterprise_linux:4::ws From an advisory covering 7 CVEs	before 0:4.3.9-3.31	0:4.3.9-3.31
`php` Red Hat:enterprise_linux:5::client_workstation From an advisory covering 7 CVEs	before 0:5.1.6-27.el5_5.3	0:5.1.6-27.el5_5.3
`php-bcmath` Red Hat:enterprise_linux:5::client_workstation From an advisory covering 7 CVEs	before 0:5.1.6-27.el5_5.3	0:5.1.6-27.el5_5.3
`php-cli` Red Hat:enterprise_linux:5::client_workstation From an advisory covering 7 CVEs	before 0:5.1.6-27.el5_5.3	0:5.1.6-27.el5_5.3
`php-common` Red Hat:enterprise_linux:5::client_workstation From an advisory covering 7 CVEs	before 0:5.1.6-27.el5_5.3	0:5.1.6-27.el5_5.3
`php-dba` Red Hat:enterprise_linux:5::client_workstation From an advisory covering 7 CVEs	before 0:5.1.6-27.el5_5.3	0:5.1.6-27.el5_5.3
`php-debuginfo` Red Hat:enterprise_linux:5::client_workstation From an advisory covering 7 CVEs	before 0:5.1.6-27.el5_5.3	0:5.1.6-27.el5_5.3
`php-devel` Red Hat:enterprise_linux:5::client_workstation From an advisory covering 7 CVEs	before 0:5.1.6-27.el5_5.3	0:5.1.6-27.el5_5.3
`php-gd` Red Hat:enterprise_linux:5::client_workstation From an advisory covering 7 CVEs	before 0:5.1.6-27.el5_5.3	0:5.1.6-27.el5_5.3
`php-imap` Red Hat:enterprise_linux:5::client_workstation From an advisory covering 7 CVEs	before 0:5.1.6-27.el5_5.3	0:5.1.6-27.el5_5.3
`php-ldap` Red Hat:enterprise_linux:5::client_workstation From an advisory covering 7 CVEs	before 0:5.1.6-27.el5_5.3	0:5.1.6-27.el5_5.3
`php-mbstring` Red Hat:enterprise_linux:5::client_workstation From an advisory covering 7 CVEs	before 0:5.1.6-27.el5_5.3	0:5.1.6-27.el5_5.3
`php-mysql` Red Hat:enterprise_linux:5::client_workstation From an advisory covering 7 CVEs	before 0:5.1.6-27.el5_5.3	0:5.1.6-27.el5_5.3
`php-ncurses` Red Hat:enterprise_linux:5::client_workstation From an advisory covering 7 CVEs	before 0:5.1.6-27.el5_5.3	0:5.1.6-27.el5_5.3
`php-odbc` Red Hat:enterprise_linux:5::client_workstation From an advisory covering 7 CVEs	before 0:5.1.6-27.el5_5.3	0:5.1.6-27.el5_5.3
`php-pdo` Red Hat:enterprise_linux:5::client_workstation From an advisory covering 7 CVEs	before 0:5.1.6-27.el5_5.3	0:5.1.6-27.el5_5.3
`php-pgsql` Red Hat:enterprise_linux:5::client_workstation From an advisory covering 7 CVEs	before 0:5.1.6-27.el5_5.3	0:5.1.6-27.el5_5.3
`php-snmp` Red Hat:enterprise_linux:5::client_workstation From an advisory covering 7 CVEs	before 0:5.1.6-27.el5_5.3	0:5.1.6-27.el5_5.3
`php-soap` Red Hat:enterprise_linux:5::client_workstation From an advisory covering 7 CVEs	before 0:5.1.6-27.el5_5.3	0:5.1.6-27.el5_5.3
`php-xml` Red Hat:enterprise_linux:5::client_workstation From an advisory covering 7 CVEs	before 0:5.1.6-27.el5_5.3	0:5.1.6-27.el5_5.3
`php-xmlrpc` Red Hat:enterprise_linux:5::client_workstation From an advisory covering 7 CVEs	before 0:5.1.6-27.el5_5.3	0:5.1.6-27.el5_5.3
`php` Red Hat:enterprise_linux:5::server From an advisory covering 7 CVEs	before 0:5.1.6-27.el5_5.3	0:5.1.6-27.el5_5.3
`php-bcmath` Red Hat:enterprise_linux:5::server From an advisory covering 7 CVEs	before 0:5.1.6-27.el5_5.3	0:5.1.6-27.el5_5.3
`php-cli` Red Hat:enterprise_linux:5::server From an advisory covering 7 CVEs	before 0:5.1.6-27.el5_5.3	0:5.1.6-27.el5_5.3
`php-common` Red Hat:enterprise_linux:5::server From an advisory covering 7 CVEs	before 0:5.1.6-27.el5_5.3	0:5.1.6-27.el5_5.3
`php-dba` Red Hat:enterprise_linux:5::server From an advisory covering 7 CVEs	before 0:5.1.6-27.el5_5.3	0:5.1.6-27.el5_5.3
`php-debuginfo` Red Hat:enterprise_linux:5::server From an advisory covering 7 CVEs	before 0:5.1.6-27.el5_5.3	0:5.1.6-27.el5_5.3
`php-devel` Red Hat:enterprise_linux:5::server From an advisory covering 7 CVEs	before 0:5.1.6-27.el5_5.3	0:5.1.6-27.el5_5.3
`php-gd` Red Hat:enterprise_linux:5::server From an advisory covering 7 CVEs	before 0:5.1.6-27.el5_5.3	0:5.1.6-27.el5_5.3
`php-imap` Red Hat:enterprise_linux:5::server From an advisory covering 7 CVEs	before 0:5.1.6-27.el5_5.3	0:5.1.6-27.el5_5.3
`php-ldap` Red Hat:enterprise_linux:5::server From an advisory covering 7 CVEs	before 0:5.1.6-27.el5_5.3	0:5.1.6-27.el5_5.3
`php-mbstring` Red Hat:enterprise_linux:5::server From an advisory covering 7 CVEs	before 0:5.1.6-27.el5_5.3	0:5.1.6-27.el5_5.3
`php-mysql` Red Hat:enterprise_linux:5::server From an advisory covering 7 CVEs	before 0:5.1.6-27.el5_5.3	0:5.1.6-27.el5_5.3
`php-ncurses` Red Hat:enterprise_linux:5::server From an advisory covering 7 CVEs	before 0:5.1.6-27.el5_5.3	0:5.1.6-27.el5_5.3
`php-odbc` Red Hat:enterprise_linux:5::server From an advisory covering 7 CVEs	before 0:5.1.6-27.el5_5.3	0:5.1.6-27.el5_5.3
`php-pdo` Red Hat:enterprise_linux:5::server From an advisory covering 7 CVEs	before 0:5.1.6-27.el5_5.3	0:5.1.6-27.el5_5.3
`php-pgsql` Red Hat:enterprise_linux:5::server From an advisory covering 7 CVEs	before 0:5.1.6-27.el5_5.3	0:5.1.6-27.el5_5.3
`php-snmp` Red Hat:enterprise_linux:5::server From an advisory covering 7 CVEs	before 0:5.1.6-27.el5_5.3	0:5.1.6-27.el5_5.3
`php-soap` Red Hat:enterprise_linux:5::server From an advisory covering 7 CVEs	before 0:5.1.6-27.el5_5.3	0:5.1.6-27.el5_5.3
`php-xml` Red Hat:enterprise_linux:5::server From an advisory covering 7 CVEs	before 0:5.1.6-27.el5_5.3	0:5.1.6-27.el5_5.3
`php-xmlrpc` Red Hat:enterprise_linux:5::server From an advisory covering 7 CVEs	before 0:5.1.6-27.el5_5.3	0:5.1.6-27.el5_5.3
`php` Red Hat:enterprise_linux:6::client From an advisory covering 4 CVEs	before 0:5.3.2-6.el6_0.1	0:5.3.2-6.el6_0.1
`php-bcmath` Red Hat:enterprise_linux:6::client From an advisory covering 4 CVEs	before 0:5.3.2-6.el6_0.1	0:5.3.2-6.el6_0.1
`php-cli` Red Hat:enterprise_linux:6::client From an advisory covering 4 CVEs	before 0:5.3.2-6.el6_0.1	0:5.3.2-6.el6_0.1
`php-common` Red Hat:enterprise_linux:6::client From an advisory covering 4 CVEs	before 0:5.3.2-6.el6_0.1	0:5.3.2-6.el6_0.1
`php-dba` Red Hat:enterprise_linux:6::client From an advisory covering 4 CVEs	before 0:5.3.2-6.el6_0.1	0:5.3.2-6.el6_0.1
`php-debuginfo` Red Hat:enterprise_linux:6::client From an advisory covering 4 CVEs	before 0:5.3.2-6.el6_0.1	0:5.3.2-6.el6_0.1
`php-devel` Red Hat:enterprise_linux:6::client From an advisory covering 4 CVEs	before 0:5.3.2-6.el6_0.1	0:5.3.2-6.el6_0.1
`php-embedded` Red Hat:enterprise_linux:6::client From an advisory covering 4 CVEs	before 0:5.3.2-6.el6_0.1	0:5.3.2-6.el6_0.1
`php-enchant` Red Hat:enterprise_linux:6::client From an advisory covering 4 CVEs	before 0:5.3.2-6.el6_0.1	0:5.3.2-6.el6_0.1
`php-gd` Red Hat:enterprise_linux:6::client From an advisory covering 4 CVEs	before 0:5.3.2-6.el6_0.1	0:5.3.2-6.el6_0.1
`php-imap` Red Hat:enterprise_linux:6::client From an advisory covering 4 CVEs	before 0:5.3.2-6.el6_0.1	0:5.3.2-6.el6_0.1
`php-intl` Red Hat:enterprise_linux:6::client From an advisory covering 4 CVEs	before 0:5.3.2-6.el6_0.1	0:5.3.2-6.el6_0.1
`php-ldap` Red Hat:enterprise_linux:6::client From an advisory covering 4 CVEs	before 0:5.3.2-6.el6_0.1	0:5.3.2-6.el6_0.1
`php-mbstring` Red Hat:enterprise_linux:6::client From an advisory covering 4 CVEs	before 0:5.3.2-6.el6_0.1	0:5.3.2-6.el6_0.1
`php-mysql` Red Hat:enterprise_linux:6::client From an advisory covering 4 CVEs	before 0:5.3.2-6.el6_0.1	0:5.3.2-6.el6_0.1
`php-odbc` Red Hat:enterprise_linux:6::client From an advisory covering 4 CVEs	before 0:5.3.2-6.el6_0.1	0:5.3.2-6.el6_0.1
`php-pdo` Red Hat:enterprise_linux:6::client From an advisory covering 4 CVEs	before 0:5.3.2-6.el6_0.1	0:5.3.2-6.el6_0.1
`php-pgsql` Red Hat:enterprise_linux:6::client From an advisory covering 4 CVEs	before 0:5.3.2-6.el6_0.1	0:5.3.2-6.el6_0.1
`php-process` Red Hat:enterprise_linux:6::client From an advisory covering 4 CVEs	before 0:5.3.2-6.el6_0.1	0:5.3.2-6.el6_0.1
`php-pspell` Red Hat:enterprise_linux:6::client From an advisory covering 4 CVEs	before 0:5.3.2-6.el6_0.1	0:5.3.2-6.el6_0.1
`php-recode` Red Hat:enterprise_linux:6::client From an advisory covering 4 CVEs	before 0:5.3.2-6.el6_0.1	0:5.3.2-6.el6_0.1
`php-snmp` Red Hat:enterprise_linux:6::client From an advisory covering 4 CVEs	before 0:5.3.2-6.el6_0.1	0:5.3.2-6.el6_0.1
`php-soap` Red Hat:enterprise_linux:6::client From an advisory covering 4 CVEs	before 0:5.3.2-6.el6_0.1	0:5.3.2-6.el6_0.1
`php-tidy` Red Hat:enterprise_linux:6::client From an advisory covering 4 CVEs	before 0:5.3.2-6.el6_0.1	0:5.3.2-6.el6_0.1
`php-xml` Red Hat:enterprise_linux:6::client From an advisory covering 4 CVEs	before 0:5.3.2-6.el6_0.1	0:5.3.2-6.el6_0.1
`php-xmlrpc` Red Hat:enterprise_linux:6::client From an advisory covering 4 CVEs	before 0:5.3.2-6.el6_0.1	0:5.3.2-6.el6_0.1
`php-zts` Red Hat:enterprise_linux:6::client From an advisory covering 4 CVEs	before 0:5.3.2-6.el6_0.1	0:5.3.2-6.el6_0.1
`php` Red Hat:enterprise_linux:6::computenode From an advisory covering 4 CVEs	before 0:5.3.2-6.el6_0.1	0:5.3.2-6.el6_0.1
`php-bcmath` Red Hat:enterprise_linux:6::computenode From an advisory covering 4 CVEs	before 0:5.3.2-6.el6_0.1	0:5.3.2-6.el6_0.1
`php-cli` Red Hat:enterprise_linux:6::computenode From an advisory covering 4 CVEs	before 0:5.3.2-6.el6_0.1	0:5.3.2-6.el6_0.1
`php-common` Red Hat:enterprise_linux:6::computenode From an advisory covering 4 CVEs	before 0:5.3.2-6.el6_0.1	0:5.3.2-6.el6_0.1
`php-dba` Red Hat:enterprise_linux:6::computenode From an advisory covering 4 CVEs	before 0:5.3.2-6.el6_0.1	0:5.3.2-6.el6_0.1
`php-debuginfo` Red Hat:enterprise_linux:6::computenode From an advisory covering 4 CVEs	before 0:5.3.2-6.el6_0.1	0:5.3.2-6.el6_0.1
`php-devel` Red Hat:enterprise_linux:6::computenode From an advisory covering 4 CVEs	before 0:5.3.2-6.el6_0.1	0:5.3.2-6.el6_0.1
`php-embedded` Red Hat:enterprise_linux:6::computenode From an advisory covering 4 CVEs	before 0:5.3.2-6.el6_0.1	0:5.3.2-6.el6_0.1
`php-enchant` Red Hat:enterprise_linux:6::computenode From an advisory covering 4 CVEs	before 0:5.3.2-6.el6_0.1	0:5.3.2-6.el6_0.1
`php-gd` Red Hat:enterprise_linux:6::computenode From an advisory covering 4 CVEs	before 0:5.3.2-6.el6_0.1	0:5.3.2-6.el6_0.1
`php-imap` Red Hat:enterprise_linux:6::computenode From an advisory covering 4 CVEs	before 0:5.3.2-6.el6_0.1	0:5.3.2-6.el6_0.1
`php-intl` Red Hat:enterprise_linux:6::computenode From an advisory covering 4 CVEs	before 0:5.3.2-6.el6_0.1	0:5.3.2-6.el6_0.1
`php-ldap` Red Hat:enterprise_linux:6::computenode From an advisory covering 4 CVEs	before 0:5.3.2-6.el6_0.1	0:5.3.2-6.el6_0.1
`php-mbstring` Red Hat:enterprise_linux:6::computenode From an advisory covering 4 CVEs	before 0:5.3.2-6.el6_0.1	0:5.3.2-6.el6_0.1
`php-mysql` Red Hat:enterprise_linux:6::computenode From an advisory covering 4 CVEs	before 0:5.3.2-6.el6_0.1	0:5.3.2-6.el6_0.1
`php-odbc` Red Hat:enterprise_linux:6::computenode From an advisory covering 4 CVEs	before 0:5.3.2-6.el6_0.1	0:5.3.2-6.el6_0.1
`php-pdo` Red Hat:enterprise_linux:6::computenode From an advisory covering 4 CVEs	before 0:5.3.2-6.el6_0.1	0:5.3.2-6.el6_0.1
`php-pgsql` Red Hat:enterprise_linux:6::computenode From an advisory covering 4 CVEs	before 0:5.3.2-6.el6_0.1	0:5.3.2-6.el6_0.1
`php-process` Red Hat:enterprise_linux:6::computenode From an advisory covering 4 CVEs	before 0:5.3.2-6.el6_0.1	0:5.3.2-6.el6_0.1
`php-pspell` Red Hat:enterprise_linux:6::computenode From an advisory covering 4 CVEs	before 0:5.3.2-6.el6_0.1	0:5.3.2-6.el6_0.1
`php-recode` Red Hat:enterprise_linux:6::computenode From an advisory covering 4 CVEs	before 0:5.3.2-6.el6_0.1	0:5.3.2-6.el6_0.1
`php-snmp` Red Hat:enterprise_linux:6::computenode From an advisory covering 4 CVEs	before 0:5.3.2-6.el6_0.1	0:5.3.2-6.el6_0.1
`php-soap` Red Hat:enterprise_linux:6::computenode From an advisory covering 4 CVEs	before 0:5.3.2-6.el6_0.1	0:5.3.2-6.el6_0.1
`php-tidy` Red Hat:enterprise_linux:6::computenode From an advisory covering 4 CVEs	before 0:5.3.2-6.el6_0.1	0:5.3.2-6.el6_0.1
`php-xml` Red Hat:enterprise_linux:6::computenode From an advisory covering 4 CVEs	before 0:5.3.2-6.el6_0.1	0:5.3.2-6.el6_0.1
`php-xmlrpc` Red Hat:enterprise_linux:6::computenode From an advisory covering 4 CVEs	before 0:5.3.2-6.el6_0.1	0:5.3.2-6.el6_0.1
`php-zts` Red Hat:enterprise_linux:6::computenode From an advisory covering 4 CVEs	before 0:5.3.2-6.el6_0.1	0:5.3.2-6.el6_0.1
`php` Red Hat:enterprise_linux:6::server From an advisory covering 4 CVEs	before 0:5.3.2-6.el6_0.1	0:5.3.2-6.el6_0.1
`php-bcmath` Red Hat:enterprise_linux:6::server From an advisory covering 4 CVEs	before 0:5.3.2-6.el6_0.1	0:5.3.2-6.el6_0.1
`php-dba` Red Hat:enterprise_linux:6::server From an advisory covering 4 CVEs	before 0:5.3.2-6.el6_0.1	0:5.3.2-6.el6_0.1
`php-debuginfo` Red Hat:enterprise_linux:6::server From an advisory covering 4 CVEs	before 0:5.3.2-6.el6_0.1	0:5.3.2-6.el6_0.1
`php-devel` Red Hat:enterprise_linux:6::server From an advisory covering 4 CVEs	before 0:5.3.2-6.el6_0.1	0:5.3.2-6.el6_0.1
`php-embedded` Red Hat:enterprise_linux:6::server From an advisory covering 4 CVEs	before 0:5.3.2-6.el6_0.1	0:5.3.2-6.el6_0.1
`php-enchant` Red Hat:enterprise_linux:6::server From an advisory covering 4 CVEs	before 0:5.3.2-6.el6_0.1	0:5.3.2-6.el6_0.1
`php-imap` Red Hat:enterprise_linux:6::server From an advisory covering 4 CVEs	before 0:5.3.2-6.el6_0.1	0:5.3.2-6.el6_0.1
`php-intl` Red Hat:enterprise_linux:6::server From an advisory covering 4 CVEs	before 0:5.3.2-6.el6_0.1	0:5.3.2-6.el6_0.1
`php-mbstring` Red Hat:enterprise_linux:6::server From an advisory covering 4 CVEs	before 0:5.3.2-6.el6_0.1	0:5.3.2-6.el6_0.1
`php-process` Red Hat:enterprise_linux:6::server From an advisory covering 4 CVEs	before 0:5.3.2-6.el6_0.1	0:5.3.2-6.el6_0.1
`php-pspell` Red Hat:enterprise_linux:6::server From an advisory covering 4 CVEs	before 0:5.3.2-6.el6_0.1	0:5.3.2-6.el6_0.1
`php-recode` Red Hat:enterprise_linux:6::server From an advisory covering 4 CVEs	before 0:5.3.2-6.el6_0.1	0:5.3.2-6.el6_0.1
`php-snmp` Red Hat:enterprise_linux:6::server From an advisory covering 4 CVEs	before 0:5.3.2-6.el6_0.1	0:5.3.2-6.el6_0.1
`php-tidy` Red Hat:enterprise_linux:6::server From an advisory covering 4 CVEs	before 0:5.3.2-6.el6_0.1	0:5.3.2-6.el6_0.1
`php-zts` Red Hat:enterprise_linux:6::server From an advisory covering 4 CVEs	before 0:5.3.2-6.el6_0.1	0:5.3.2-6.el6_0.1
`php-cli` Red Hat:enterprise_linux:6::server From an advisory covering 4 CVEs	before 0:5.3.2-6.el6_0.1	0:5.3.2-6.el6_0.1
`php-common` Red Hat:enterprise_linux:6::server From an advisory covering 4 CVEs	before 0:5.3.2-6.el6_0.1	0:5.3.2-6.el6_0.1
`php-gd` Red Hat:enterprise_linux:6::server From an advisory covering 4 CVEs	before 0:5.3.2-6.el6_0.1	0:5.3.2-6.el6_0.1
`php-ldap` Red Hat:enterprise_linux:6::server From an advisory covering 4 CVEs	before 0:5.3.2-6.el6_0.1	0:5.3.2-6.el6_0.1
`php-mysql` Red Hat:enterprise_linux:6::server From an advisory covering 4 CVEs	before 0:5.3.2-6.el6_0.1	0:5.3.2-6.el6_0.1
`php-odbc` Red Hat:enterprise_linux:6::server From an advisory covering 4 CVEs	before 0:5.3.2-6.el6_0.1	0:5.3.2-6.el6_0.1
`php-pdo` Red Hat:enterprise_linux:6::server From an advisory covering 4 CVEs	before 0:5.3.2-6.el6_0.1	0:5.3.2-6.el6_0.1
`php-pgsql` Red Hat:enterprise_linux:6::server From an advisory covering 4 CVEs	before 0:5.3.2-6.el6_0.1	0:5.3.2-6.el6_0.1
`php-soap` Red Hat:enterprise_linux:6::server From an advisory covering 4 CVEs	before 0:5.3.2-6.el6_0.1	0:5.3.2-6.el6_0.1
`php-xml` Red Hat:enterprise_linux:6::server From an advisory covering 4 CVEs	before 0:5.3.2-6.el6_0.1	0:5.3.2-6.el6_0.1
`php-xmlrpc` Red Hat:enterprise_linux:6::server From an advisory covering 4 CVEs	before 0:5.3.2-6.el6_0.1	0:5.3.2-6.el6_0.1
`php` Red Hat:enterprise_linux:6::workstation From an advisory covering 4 CVEs	before 0:5.3.2-6.el6_0.1	0:5.3.2-6.el6_0.1
`php-bcmath` Red Hat:enterprise_linux:6::workstation From an advisory covering 4 CVEs	before 0:5.3.2-6.el6_0.1	0:5.3.2-6.el6_0.1
`php-dba` Red Hat:enterprise_linux:6::workstation From an advisory covering 4 CVEs	before 0:5.3.2-6.el6_0.1	0:5.3.2-6.el6_0.1
`php-debuginfo` Red Hat:enterprise_linux:6::workstation From an advisory covering 4 CVEs	before 0:5.3.2-6.el6_0.1	0:5.3.2-6.el6_0.1
`php-devel` Red Hat:enterprise_linux:6::workstation From an advisory covering 4 CVEs	before 0:5.3.2-6.el6_0.1	0:5.3.2-6.el6_0.1
`php-embedded` Red Hat:enterprise_linux:6::workstation From an advisory covering 4 CVEs	before 0:5.3.2-6.el6_0.1	0:5.3.2-6.el6_0.1
`php-enchant` Red Hat:enterprise_linux:6::workstation From an advisory covering 4 CVEs	before 0:5.3.2-6.el6_0.1	0:5.3.2-6.el6_0.1
`php-imap` Red Hat:enterprise_linux:6::workstation From an advisory covering 4 CVEs	before 0:5.3.2-6.el6_0.1	0:5.3.2-6.el6_0.1
`php-intl` Red Hat:enterprise_linux:6::workstation From an advisory covering 4 CVEs	before 0:5.3.2-6.el6_0.1	0:5.3.2-6.el6_0.1
`php-mbstring` Red Hat:enterprise_linux:6::workstation From an advisory covering 4 CVEs	before 0:5.3.2-6.el6_0.1	0:5.3.2-6.el6_0.1
`php-process` Red Hat:enterprise_linux:6::workstation From an advisory covering 4 CVEs	before 0:5.3.2-6.el6_0.1	0:5.3.2-6.el6_0.1
`php-pspell` Red Hat:enterprise_linux:6::workstation From an advisory covering 4 CVEs	before 0:5.3.2-6.el6_0.1	0:5.3.2-6.el6_0.1
`php-recode` Red Hat:enterprise_linux:6::workstation From an advisory covering 4 CVEs	before 0:5.3.2-6.el6_0.1	0:5.3.2-6.el6_0.1
`php-snmp` Red Hat:enterprise_linux:6::workstation From an advisory covering 4 CVEs	before 0:5.3.2-6.el6_0.1	0:5.3.2-6.el6_0.1
`php-tidy` Red Hat:enterprise_linux:6::workstation From an advisory covering 4 CVEs	before 0:5.3.2-6.el6_0.1	0:5.3.2-6.el6_0.1
`php-zts` Red Hat:enterprise_linux:6::workstation From an advisory covering 4 CVEs	before 0:5.3.2-6.el6_0.1	0:5.3.2-6.el6_0.1
`php-cli` Red Hat:enterprise_linux:6::workstation From an advisory covering 4 CVEs	before 0:5.3.2-6.el6_0.1	0:5.3.2-6.el6_0.1
`php-common` Red Hat:enterprise_linux:6::workstation From an advisory covering 4 CVEs	before 0:5.3.2-6.el6_0.1	0:5.3.2-6.el6_0.1
`php-gd` Red Hat:enterprise_linux:6::workstation From an advisory covering 4 CVEs	before 0:5.3.2-6.el6_0.1	0:5.3.2-6.el6_0.1
`php-ldap` Red Hat:enterprise_linux:6::workstation From an advisory covering 4 CVEs	before 0:5.3.2-6.el6_0.1	0:5.3.2-6.el6_0.1
`php-mysql` Red Hat:enterprise_linux:6::workstation From an advisory covering 4 CVEs	before 0:5.3.2-6.el6_0.1	0:5.3.2-6.el6_0.1
`php-odbc` Red Hat:enterprise_linux:6::workstation From an advisory covering 4 CVEs	before 0:5.3.2-6.el6_0.1	0:5.3.2-6.el6_0.1
`php-pdo` Red Hat:enterprise_linux:6::workstation From an advisory covering 4 CVEs	before 0:5.3.2-6.el6_0.1	0:5.3.2-6.el6_0.1
`php-pgsql` Red Hat:enterprise_linux:6::workstation From an advisory covering 4 CVEs	before 0:5.3.2-6.el6_0.1	0:5.3.2-6.el6_0.1
`php-soap` Red Hat:enterprise_linux:6::workstation From an advisory covering 4 CVEs	before 0:5.3.2-6.el6_0.1	0:5.3.2-6.el6_0.1
`php-xml` Red Hat:enterprise_linux:6::workstation From an advisory covering 4 CVEs	before 0:5.3.2-6.el6_0.1	0:5.3.2-6.el6_0.1
`php-xmlrpc` Red Hat:enterprise_linux:6::workstation From an advisory covering 4 CVEs	before 0:5.3.2-6.el6_0.1	0:5.3.2-6.el6_0.1

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	PHP 5.3.2 - 'xml_utf8_decode()' UTF-8 Input Validation	2009-05-11

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, facts
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, Exploit-DB, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2010-3870 is a medium vulnerability (CVSS 6.8) in Php, published November 12, 2010. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 11.3%, the 95th percentile. No source names a fixed version.

References

Show 69 moreShow less