PHP Other Vulnerability (CVE-2003-0442)

Description

Cross-site scripting (XSS) vulnerability in the transparent SID support capability for PHP before 4.3.2 (session.use_trans_sid) allows remote attackers to insert arbitrary script via the PHPSESSID parameter.

Remediation

References

CVE-2003-0442

Related Vulnerabilities

MediaWiki CVE-2017-8812 Vulnerability (CVE-2017-8812)

WordPress Plugin Social Sticky Animated Backdoor (1.0)

Oracle JRE CVE-2012-5071 Vulnerability (CVE-2012-5071)

WordPress Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2008-0194)

WordPress Plugin SEO-Dashboard by gutewebsites.de Cross-Site Scripting (1.2.5)

Severity

Medium

Classification