Description
Cross-site scripting (XSS) vulnerability in the phpinfo function in PHP 4.2.3 allows remote attackers to inject arbitrary web script or HTML via the query string argument, as demonstrated using soinfo.php.
Remediation
References
Related Vulnerabilities
WordPress Plugin SimpleFlickr Cross-Site Request Forgery (3.0.3)
Oracle HTTP Server Other Vulnerability (CVE-2020-35164)
Oracle Database Server CVE-2013-5771 Vulnerability (CVE-2013-5771)
Drupal Core 9.0.x Directory Traversal (9.0.0 - 9.0.14)
WordPress Plugin Calendar Event Multi View Security Bypass (1.4.06)