Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2007-1454
HistoryMar 14, 2007 - 6:19 p.m.

CVE-2007-1454

2007-03-1418:19:00
[email protected]
web.nvd.nist.gov
46
cve-2007-1454
php
xss
nvd
security
vulnerability

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6.9 Medium

AI Score

Confidence

High

0.01 Low

EPSS

Percentile

83.6%

JSON

ext/filter in PHP 5.2.0, when FILTER_SANITIZE_STRING is used with the FILTER_FLAG_STRIP_LOW flag, does not properly strip HTML tags, which allows remote attackers to conduct cross-site scripting (XSS) attacks via HTML with a ‘<’ character followed by certain whitespace characters, which passes one filter but is collapsed into a valid tag, as demonstrated using %0b.

Affected configurations

NVD
Node
phpphpMatch5.2.0
CPENameOperatorVersion
php:phpphpeq5.2.0

Related

redhatcve 1
cvelist 1
ubuntucve 1
prion 1
nvd 1
securityvulns 1
openvas 7
nessus 4
osv 1
debian 1
suse 1
redhatcve
redhatcve
CVE-2007-1454
2015-10-30 10:20:17
cvelist
cvelist
CVE-2007-1454
2007-03-14 18:00:00
ubuntucve
ubuntucve
CVE-2007-1454
2007-03-14 00:00:00
prion
prion
Cross site scripting
2007-03-14 18:19:00
nvd
nvd
CVE-2007-1454
2007-03-14 18:19:00
securityvulns
securityvulns
PHP filtering extension multiple security vulnerabilities
2007-03-14 00:00:00
openvas
openvas
Mandriva Update for php MDKSA-2007:090 (php)
2009-04-09 00:00:00
Mandriva Update for php MDKSA-2007:090 (php)
2009-04-09 00:00:00
Debian: Security Advisory (DSA-1283-1)
2008-01-17 00:00:00
nessus
nessus
Mandrake Linux Security Advisory : php (MDKSA-2007:090)
2009-04-23 00:00:00
Debian DSA-1283-1 : php5 - several vulnerabilities
2007-04-30 00:00:00
openSUSE 10 Security Update : apache2-mod_php5 (apache2-mod_php5-3289)
2007-10-17 00:00:00
osv
osv
php5
2007-04-29 00:00:00
debian
debian
[SECURITY] [DSA 1283-1] New php5 packages fix several vulnerabilities
2007-04-29 20:16:06
suse
suse
remote code execution in php4,php5
2007-05-23 13:16:49

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6.9 Medium

AI Score

Confidence

High

0.01 Low

EPSS

Percentile

83.6%

JSON
Related for CVE-2007-1454
redhatcve1cvelist1ubuntucve1prion1nvd1securityvulns1openvas7nessus4osv1debian1suse1