Description
A regression error in the phpinfo function in PHP 4.4.3 to 4.4.6, and PHP 6.0 in CVS, allows remote attackers to conduct cross-site scripting (XSS) attacks via GET, POST, or COOKIE array values, which are not escaped in the phpinfo output, as originally fixed for CVE-2005-3388.
Remediation
References
Related Vulnerabilities
TYPO3 Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2012-3529)
Sqlite NULL Pointer Dereference Vulnerability (CVE-2019-19880)
WordPress Plugin PDF Flipbook, 3D Flipbook WordPress-DearFlip Unspecified Vulnerability (1.7.12)
WordPress Plugin WordPress Geo-CF Geo Cross-Site Scripting (7.13.11)
Zope Web Application Server Other Vulnerability (CVE-2000-1212)