CVE-2006-1490

CVE-2006-1490 describes an information disclosure vulnerability in PHP versions prior to 5.1.3-RC1. This flaw allows remote attackers to obtain portions of server memory by sending specially crafted binary data to scripts that utilize the html_entity_decode function and return encoded results. The vulnerability has a CVSS score of 5.0, indicating a medium severity, as it can be exploited remotely with low attack complexity and without authentication, leading to a partial disclosure of confidential information. While there is no evidence of active exploitation, an ExploitDB entry exists, and the vulnerability has received minimal community discussion or media coverage.