2.6

CVE-2006-0208

Multiple cross-site scripting (XSS) vulnerabilities in PHP 4.4.1 and 5.1.1, when display_errors and html_errors are on, allow remote attackers to inject arbitrary web script or HTML via inputs to PHP applications that are not filtered when they are included in the resulting error message.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Php ≫ Php Version4.0 Updatebeta_4_patch1
Php ≫ Php Version4.0 Updatebeta1
Php ≫ Php Version4.0 Updatebeta2
Php ≫ Php Version4.0 Updatebeta3
Php ≫ Php Version4.0 Updatebeta4
Php ≫ Php Version4.0 Updaterc1
Php ≫ Php Version4.0 Updaterc2
Php ≫ Php Version4.0.0
Php ≫ Php Version4.0.1
Php ≫ Php Version4.0.2
Php ≫ Php Version4.0.3
Php ≫ Php Version4.0.4
Php ≫ Php Version4.0.5
Php ≫ Php Version4.0.6
Php ≫ Php Version4.1.0
Php ≫ Php Version4.1.1
Php ≫ Php Version4.1.2
Php ≫ Php Version4.2.0
Php ≫ Php Version4.2.1
Php ≫ Php Version4.2.2
Php ≫ Php Version4.2.3
Php ≫ Php Version4.3.0
Php ≫ Php Version4.3.1
Php ≫ Php Version4.3.2
Php ≫ Php Version4.3.3
Php ≫ Php Version4.3.4
Php ≫ Php Version4.3.5
Php ≫ Php Version4.3.6
Php ≫ Php Version4.3.7
Php ≫ Php Version4.3.8
Php ≫ Php Version4.3.9
Php ≫ Php Version4.3.10
Php ≫ Php Version4.3.11
Php ≫ Php Version4.4.1
Php ≫ Php Version4.4.2
Php ≫ Php Version5.0.0
Php ≫ Php Version5.0.0 Updatebeta1
Php ≫ Php Version5.0.0 Updatebeta2
Php ≫ Php Version5.0.0 Updatebeta3
Php ≫ Php Version5.0.0 Updaterc1
Php ≫ Php Version5.0.0 Updaterc2
Php ≫ Php Version5.0.0 Updaterc3
Php ≫ Php Version5.0.1
Php ≫ Php Version5.0.2
Php ≫ Php Version5.0.3
Php ≫ Php Version5.0.4
Php ≫ Php Version5.0.5
Php ≫ Php Version5.1.0
Php ≫ Php Version5.1.1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 3.77% 0.886
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 2.6 4.9 2.9
AV:N/AC:H/Au:N/C:N/I:P/A:N
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

ftp://patches.sgi.com/support/free/security/advisories/20060501-01-U.asc
http://rhn.redhat.com/errata/RHSA-2006-0276.html
http://rhn.redhat.com/errata/RHSA-2006-0549.html
Vendor Advisory
http://secunia.com/advisories/19832
Vendor Advisory
http://secunia.com/advisories/20210
Vendor Advisory
http://secunia.com/advisories/20222
Vendor Advisory
http://secunia.com/advisories/20951
Vendor Advisory
http://secunia.com/advisories/21252
Vendor Advisory
http://secunia.com/advisories/21564
Vendor Advisory
http://support.avaya.com/elmodocs2/security/ASA-2006-129.htm
http://support.avaya.com/elmodocs2/security/ASA-2006-160.htm
http://www.redhat.com/support/errata/RHSA-2006-0501.html
Vendor Advisory
http://www.vupen.com/english/advisories/2006/2685
Vendor Advisory
http://lists.suse.de/archive/suse-security-announce/2006-Feb/0008.html
http://secunia.com/advisories/19012
Vendor Advisory
http://secunia.com/advisories/18431
Patch
Vendor Advisory
http://www.php.net/release_5_1_2.php
Patch
http://www.vupen.com/english/advisories/2006/0177
Vendor Advisory
http://www.vupen.com/english/advisories/2006/0369
Vendor Advisory
http://secunia.com/advisories/18697
Patch
Vendor Advisory
http://secunia.com/advisories/19179
Patch
Vendor Advisory
http://secunia.com/advisories/19355
Patch
Vendor Advisory
http://www.gentoo.org/security/en/glsa/glsa-200603-22.xml
Patch
Vendor Advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2006:028
https://usn.ubuntu.com/261-1/
http://www.php.net/ChangeLog-4.php#4.4.2
http://www.securityfocus.com/bid/16803
Patch
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=178028
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10064