Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cvelistRedhatCVELIST:CVE-2009-4142
HistoryDec 21, 2009 - 4:00 p.m.

CVE-2009-4142

2009-12-2116:00:00
redhat
www.cve.org
4

AI Score

8.5

Confidence

High

EPSS

0.02

Percentile

88.9%

JSON

The htmlspecialchars function in PHP before 5.2.12 does not properly handle (1) overlong UTF-8 sequences, (2) invalid Shift_JIS sequences, and (3) invalid EUC-JP sequences, which allows remote attackers to conduct cross-site scripting (XSS) attacks by placing a crafted byte sequence before a special character.

Related

cve 1
openvas 33
veracode 1
prion 1
nvd 1
nessus 20
ubuntucve 1
seebug 1
debian 2
osv 1
fedora 2
ubuntu 1
securityvulns 2
freebsd 1
slackware 1
redhat 1
oraclelinux 1
centos 1
gentoo 1
threatpost 1
cve
cve
CVE-2009-4142
2009-12-21 16:30:00
openvas
openvas
Mandriva Update for php MDVSA-2010:009 (php)
2010-01-19 00:00:00
Mandriva Update for php MDVSA-2010:009 (php)
2010-01-19 00:00:00
PHP < 5.2.12 Multiple Vulnerabilities
2009-12-18 00:00:00
veracode
veracode
Cross-Site Scripting (XSS)
2020-04-10 00:42:40
prion
prion
Cross site scripting
2009-12-21 16:30:00
nvd
nvd
CVE-2009-4142
2009-12-21 16:30:00
nessus
nessus
Mandriva Linux Security Advisory : php (MDVSA-2010:009)
2010-07-30 00:00:00
Mandriva Linux Security Advisory : php (MDVSA-2010:008)
2010-01-18 00:00:00
Debian DSA-2001-1 : php5 - multiple vulnerabilities
2010-02-24 00:00:00
ubuntucve
ubuntucve
CVE-2009-4142
2009-12-21 00:00:00
seebug
seebug
PHP 'htmlspecialcharacters()'į•ļå―ĒåĪšå­—čŠ‚å­—įŽĶč·ĻįŦ™č„šæœŽæžæīž
2009-12-18 00:00:00
debian
debian
[SECURITY] [DSA-2001-1] New php5 packages fix multiple vulnerabilities
2010-02-19 14:56:46
[SECURITY] [DSA-2001-1] New php5 packages fix multiple vulnerabilities
2010-02-19 14:56:46
osv
osv
php5 - multiple vulnerabilities
2010-02-19 00:00:00
fedora
fedora
[SECURITY] Fedora 11 Update: php-5.2.12-1.fc11
2010-02-01 01:09:42
[SECURITY] Fedora 11 Update: maniadrive-1.2-17.fc11
2010-02-01 01:09:42
ubuntu
ubuntu
PHP vulnerabilities
2010-01-13 00:00:00
securityvulns
securityvulns
PHP multiple security vulnerabilities
2010-01-08 00:00:00
PHP 5.2.12 Release Announcement
2010-01-08 00:00:00
freebsd
freebsd
php -- multiple vulnerabilities
2009-12-17 00:00:00
slackware
slackware
[slackware-security] php
2010-01-25 05:20:07
redhat
redhat
(RHSA-2010:0040) Moderate: php security update
2010-01-13 00:00:00
oraclelinux
oraclelinux
php security update
2010-01-13 00:00:00
centos
centos
php security update
2010-01-13 22:42:15
gentoo
gentoo
PHP: Multiple vulnerabilities
2010-01-05 00:00:00
threatpost
threatpost
Apple Mega Patch Covers 88 Mac OS X Vulnerabilities
2010-03-29 17:15:44

AI Score

8.5

Confidence

High

EPSS

0.02

Percentile

88.9%

JSON
Related for CVELIST:CVE-2009-4142
cve1openvas33veracode1prion1nvd1nessus20ubuntucve1seebug1debian2osv1fedora2ubuntu1securityvulns2freebsd1slackware1redhat1oraclelinux1centos1gentoo1threatpost1