Lucene search

K
prionPRIOn knowledge basePRION:CVE-2007-1287
HistoryMar 06, 2007 - 8:19 p.m.

Cross site scripting

2007-03-0620:19:00
PRIOn knowledge base
www.prio-n.com
8

5.6 Medium

AI Score

Confidence

High

0.826 High

EPSS

Percentile

98.4%

A regression error in the phpinfo function in PHP 4.4.3 to 4.4.6, and PHP 6.0 in CVS, allows remote attackers to conduct cross-site scripting (XSS) attacks via GET, POST, or COOKIE array values, which are not escaped in the phpinfo output, as originally fixed for CVE-2005-3388.

CPENameOperatorVersion
phpeq4.4.4
phpeq6.0
phpeq4.4.5
phpeq4.4.6

5.6 Medium

AI Score

Confidence

High

0.826 High

EPSS

Percentile

98.4%