Description

Cross-site scripting (XSS) vulnerability in phpinfo (info.c) in PHP 5.1.2 and 4.4.2 allows remote attackers to inject arbitrary web script or HTML via long array variables, including (1) a large number of dimensions or (2) long values, which prevents HTML tags from being removed.

Remediation

References

CVE-2006-0996

Related Vulnerabilities

Apache HTTP Server Other Vulnerability (CVE-2000-1206)

WordPress Plugin GeoDirectory-WordPress Business Directory and Classified Ads Listings Cross-Site Scripting (2.2.21)

Ruby Numeric Errors Vulnerability (CVE-2008-2726)

Claroline Other Vulnerability (CVE-2006-2284)

Dotclear Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2014-3783)

Severity

Medium

Classification

CVE-2006-0996 CWE-707

Tags

Missing Update Known Vulnerabilities