CVE-2010-4156

CVE-2010-4156 describes an information disclosure vulnerability in the mb_strcut function of Libmbfl 1.1.0, affecting PHP versions 5.3.x through 5.3.3. An attacker can exploit this by providing a large length parameter, potentially revealing sensitive information. This vulnerability has a CVSS score of 5.0, indicating a medium severity, and can be exploited remotely with low attack complexity, leading to partial confidentiality impact. There is no impact on integrity or availability. While not listed on the CISA KEV catalog or the Hot List, an ExploitDB entry (EDB-34979) exists, suggesting proof-of-concept code is available. However, there is no evidence of active exploitation, and community discussion and media coverage are minimal.