PHP Other Vulnerability (CVE-2005-3388)

Description

Cross-site scripting (XSS) vulnerability in the phpinfo function in PHP 4.x up to 4.4.0 and 5.x up to 5.0.5 allows remote attackers to inject arbitrary web script or HTML via a crafted URL with a "stacked array assignment."

Remediation

References

CVE-2005-3388

Related Vulnerabilities

Jboss EAP Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2014-0059)

Atlassian Jira CVE-2019-20413 Vulnerability (CVE-2019-20413)

MySQL CVE-2013-5894 Vulnerability (CVE-2013-5894)

WordPress Plugin Easiest Contact Form for WordPress-AP Contact Form includes Backdoor [Only if downloaded via the vendor website] (1.0.6)

Apache 2.2.14 mod_isapi Dangling Pointer

Severity

Medium

Classification