Description

Cross-site scripting (XSS) vulnerability in the phpinfo function in PHP 4.2.3 allows remote attackers to inject arbitrary web script or HTML via the query string argument, as demonstrated using soinfo.php.

Remediation

References

CVE-2002-1954

Related Vulnerabilities

WordPress Plugin Cryptocurrency Donation Box-Bitcoin & Crypto Donations Security Bypass (1.7)

LimeSurvey Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-17003)

osCommerce Other Vulnerability (CVE-2003-1219)

Roundcube Unspesificed Vulnerability (CVE-2018-9846)

osCommerce Other Vulnerability (CVE-2005-1951)

Severity

Medium

Classification

CVE-2002-1954

Tags

Missing Update Known Vulnerabilities