CVE-2010-2190

CVE-2010-2190 describes an information disclosure vulnerability affecting PHP versions 5.2 through 5.2.13 and 5.3 through 5.3.2. Specifically, the trim, ltrim, rtrim, and substr_replace functions can be manipulated to reveal sensitive memory contents due to an issue with the call time pass by reference feature. This vulnerability has a CVSS score of 5.0, indicating a medium severity, and allows unauthenticated attackers to remotely obtain sensitive information with low attack complexity. There is no evidence of active exploitation, nor are there public exploits available in Metasploit or ExploitDB. Community discussion and media coverage are minimal, suggesting low current attention to this decade-old vulnerability.