Description
Cross-site scripting (XSS) vulnerability in PHP, possibly 5.2.7 and earlier, when display_errors is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: because of the lack of details, it is unclear whether this is related to CVE-2006-0208.
Remediation
References
Related Vulnerabilities
WordPress Plugin Asgaros Forum Multiple SQL Injection Vulnerabilities (1.15.12)
Squid Improper Input Validation Vulnerability (CVE-2009-2855)
OpenSSL Other Vulnerability (CVE-2002-0655)
WordPress Plugin BackUpWordPress Remote File Inclusion (0.4.2b)
Oracle Application Server Other Vulnerability (CVE-2000-0169)