Description

A regression error in the phpinfo function in PHP 4.4.3 to 4.4.6, and PHP 6.0 in CVS, allows remote attackers to conduct cross-site scripting (XSS) attacks via GET, POST, or COOKIE array values, which are not escaped in the phpinfo output, as originally fixed for CVE-2005-3388.

Remediation

References

CVE-2007-1287

Related Vulnerabilities

Internet Information Services Other Vulnerability (CVE-1999-0737)

WordPress Permissions, Privileges, and Access Controls Vulnerability (CVE-2008-3747)

WordPress Plugin Amelia-Events & Appointments Booking Calendar Multiple Vulnerabilities (1.0.45)

PostgreSQL Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2018-16850)

Grafana Improper Authentication Vulnerability (CVE-2022-39229)

Severity

Medium

Classification

CVE-2007-1287

Tags

Missing Update Known Vulnerabilities