CVE-2004-0958

CVE-2004-0958 is a remote memory disclosure vulnerability affecting PHP versions prior to 5.0.2. Attackers can exploit this by manipulating GET, POST, or COOKIE GPC variables ending in an open bracket, leading to incorrect string length calculations and the exposure of sensitive memory contents. With a CVSS score of 5.0 (medium severity), this vulnerability allows unauthenticated remote attackers to read confidential information with low attack complexity. While not listed in CISA's KEV catalog and showing no active exploitation or significant community discussion, public exploit code exists, including an ExploitDB entry.