Cross-site Scripting (XSS)

2020-04-1000:53:56

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.006 Low

EPSS

Percentile

79.2%

JSON

php is vulnerable to cross-site scripting (XSS). The vulnerability exists as a numeric truncation error and an input validation flaw were found in the way the PHP utf8_decode() function decoded partial multi-byte sequences for some multi-byte encodings, sending them to output without them being escaped. An attacker could use these flaws to perform a cross-site scripting attack.

CPENameOperatorVersion
phpeq5.1.6__7.el5
phpeq5.1.6__11.el5
phpeq5.1.6__20.el5_2.1
phpeq5.1.6__12.el5
phpeq5.1.6__20.el5
phpeq5.1.6__23.2.el5_3
phpeq5.1.6__24.el5_4.5
phpeq5.1.6__15.el5
phpeq5.1.6__23.el5
phpeq5.1.6__5.el5

Name	Operator	Version
php	eq	5.1.6__7.el5
php	eq	5.1.6__11.el5
php	eq	5.1.6__20.el5_2.1
php	eq	5.1.6__12.el5
php	eq	5.1.6__20.el5
php	eq	5.1.6__23.2.el5_3
php	eq	5.1.6__24.el5_4.5
php	eq	5.1.6__15.el5
php	eq	5.1.6__23.el5
php	eq	5.1.6__5.el5