Lucene search

K
cvelistMitreCVELIST:CVE-2007-1287
HistoryMar 06, 2007 - 8:00 p.m.

CVE-2007-1287

2007-03-0620:00:00
mitre
www.cve.org
1

5.6 Medium

AI Score

Confidence

High

0.826 High

EPSS

Percentile

98.4%

A regression error in the phpinfo function in PHP 4.4.3 to 4.4.6, and PHP 6.0 in CVS, allows remote attackers to conduct cross-site scripting (XSS) attacks via GET, POST, or COOKIE array values, which are not escaped in the phpinfo output, as originally fixed for CVE-2005-3388.

5.6 Medium

AI Score

Confidence

High

0.826 High

EPSS

Percentile

98.4%