Description

Cross-site scripting (XSS) vulnerability in the phpinfo function in PHP 4.x up to 4.4.0 and 5.x up to 5.0.5 allows remote attackers to inject arbitrary web script or HTML via a crafted URL with a "stacked array assignment."

Remediation

References

CVE-2005-3388

Related Vulnerabilities

WordPress Plugin Easy Appointments Cross-Site Scripting (3.11.0)

IBM RTC Permissions, Privileges, and Access Controls Vulnerability (CVE-2015-7440)

Nexus Repository Manager Improper Restriction of XML External Entity Reference Vulnerability (CVE-2020-29436)

WordPress 4.0.x PHP Object Injection (4.0 - 4.0.32)

WordPress Plugin WassUp Real Time Analytics Unspecified Vulnerability (1.7.2)

Severity

Medium

Classification

CVE-2005-3388

Tags

Missing Update Known Vulnerabilities