Description

A regression error in the phpinfo function in PHP 4.4.3 to 4.4.6, and PHP 6.0 in CVS, allows remote attackers to conduct cross-site scripting (XSS) attacks via GET, POST, or COOKIE array values, which are not escaped in the phpinfo output, as originally fixed for CVE-2005-3388.

Remediation

References

CVE-2007-1287

Related Vulnerabilities

WordPress Plugin Hide My WP Cross-Site Scripting (4.53)

WordPress Plugin Calendar Multiple Cross-Site Scripting Vulnerabilities (1.2.1)

Jenkins Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-0324)

Oracle Application Server Other Vulnerability (CVE-2004-1774)

WordPress 2.0.6 'Zend_Hash_Del_Key_Or_Index' SQL Injection Vulnerability (0.6.2 - 2.0.6)

Severity

Medium

Classification

CVE-2007-1287

Tags

Missing Update Known Vulnerabilities