CVE-2016-5094

Integer overflow in the php_html_entities function in ext/standard/html.c in PHP before 5.5.36 and 5.6.x before 5.6.22 allows remote attackers to cause a denial of service or possibly have unspecified other impact by triggering a large output string from the htmlspecialchars function.

We have discovered 90,551 live websites that are affected by CVE-2016-5094.

Run a Free Instant Scan



Affected Software

Product  PHP
Category Programming Languages
Vulnerable Domains90,551 live websites (1.31% of PHP install base)
Vulnerable Versions
  • from 5.6 through 5.6.22
Vulnerable Versions Count22 versions ( 4.16% of all versions)



Details

  • Published - Aug 7, 2016
  • Updated - Aug 6, 2024

Website Distribution by Country

Number of websites using CVE-2016-5094
United States55,147 websites


France20,675 websites
China2,965 websites
Korea, South1,034 websites
Poland974 websites
Spain788 websites
Russia759 websites
Japan707 websites
Italy679 websites

Website Distribution by TLD

Number of websites using CVE-2016-5094
.com65,256 websites
.fr8,160 websites
.org2,937 websites
.net2,894 websites
.be1,086 websites
.pl932 websites
.it656 websites
.ru653 websites
.cn605 websites
.eu468 websites

Vulnerable Versions

Vulnerable versions are highlighted in red

Websites affected by CVE-2016-5094

Top websites that are affected by CVE-2016-5094. Please click on the "Contact us" link to get more information.
DomainCountryRankContacts
*******************.fr France**,***
******.*****.com Korea, South**,***
****.net United States**,***
*********.cn China**,***
*******.*******.com United States**,***
****.com China**,***
******.com United States**,***
********.ca Germany**,***
**********.com France**,***
**********.eu France**,***
See full domain list

FAQ

A total of 90,551 websites have been identified as vulnerable to CVE-2016-5094, based on global website indexing conducted by WebTechSurvey.
The PHP is affected by the CVE-2016-5094 vulnerability.
PHP versions up to 5.6.22 are vulnerable to CVE-2016-5094.
CVE-2016-5094 is resolved in version 5.6.22 of PHP.