Description

A regression error in the phpinfo function in PHP 4.4.3 to 4.4.6, and PHP 6.0 in CVS, allows remote attackers to conduct cross-site scripting (XSS) attacks via GET, POST, or COOKIE array values, which are not escaped in the phpinfo output, as originally fixed for CVE-2005-3388.

Remediation

References

CVE-2007-1287

Related Vulnerabilities

WordPress Plugin FV Flowplayer Video Player Cross-Site Scripting (7.5.32.7212)

MySQL CVE-2021-2056 Vulnerability (CVE-2021-2056)

PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2007-4661)

WordPress Plugin Facebook, Twitter & Google+ Social Widgets Multiple Vulnerabilities (1.3.7)

WordPress Plugin PowerPress Podcasting by Blubrry Arbitrary File Upload (8.3.7)

Severity

Medium

Classification

CVE-2007-1287

Tags

Missing Update Known Vulnerabilities