Description

Cross-site scripting (XSS) vulnerability in the phpinfo function in PHP 4.2.3 allows remote attackers to inject arbitrary web script or HTML via the query string argument, as demonstrated using soinfo.php.

Remediation

References

CVE-2002-1954

Related Vulnerabilities

WordPress Improper Privilege Management Vulnerability (CVE-2020-28035)

WordPress Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2020-28040)

MySQL CVE-2020-2694 Vulnerability (CVE-2020-2694)

phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-4986)

MySQL CVE-2021-2031 Vulnerability (CVE-2021-2031)

Severity

Medium

Classification

CVE-2002-1954

Tags

Missing Update Known Vulnerabilities