CVE

Id
9023  
CVE No.
CVE-2004-0595  
Status
Candidate  
Description
The strip_tags function in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, does not filter null () characters within tag names when restricting input to allowed tags, which allows dangerous tags to be processed by web browsers such as Internet Explorer and Safari, which ignore null characters and facilitate the exploitation of cross-site scripting (XSS) vulnerabilities.  
Phase
Assigned (20040623)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
58303 9023 CVE-2004-0595 FULLDISC:20040714 Advisory 12/2004: PHP strip_tags() bypass vulnerability  View
58304 9023 CVE-2004-0595 URL:http://lists.grok.org.uk/pipermail/full-disclosure/2004-July/023909.html  View
58305 9023 CVE-2004-0595 BUGTRAQ:20040713 Advisory 11/2004: PHP memory_limit remote vulnerability  View
58306 9023 CVE-2004-0595 URL:http://marc.info/?l=bugtraq&m=108981780109154&w=2  View
58307 9023 CVE-2004-0595 BUGTRAQ:20040714 TSSA-2004-013 - php  View
58308 9023 CVE-2004-0595 URL:http://marc.info/?l=bugtraq&m=108982983426031&w=2  View
58309 9023 CVE-2004-0595 CONECTIVA:CLA-2004:847  View
58310 9023 CVE-2004-0595 URL:http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000847  View
58311 9023 CVE-2004-0595 DEBIAN:DSA-531  View
58312 9023 CVE-2004-0595 URL:http://www.debian.org/security/2004/dsa-531  View
58313 9023 CVE-2004-0595 DEBIAN:DSA-669  View
58314 9023 CVE-2004-0595 URL:http://www.debian.org/security/2005/dsa-669  View
58315 9023 CVE-2004-0595 GENTOO:GLSA-200407-13  View
58316 9023 CVE-2004-0595 URL:http://www.gentoo.org/security/en/glsa/glsa-200407-13.xml  View
58317 9023 CVE-2004-0595 HP:SSRT4777  View
58318 9023 CVE-2004-0595 URL:http://marc.info/?l=bugtraq&m=109181600614477&w=2  View
58319 9023 CVE-2004-0595 MANDRAKE:MDKSA-2004:068  View
58320 9023 CVE-2004-0595 URL:http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:068  View
58321 9023 CVE-2004-0595 REDHAT:RHSA-2004:392  View
58322 9023 CVE-2004-0595 URL:http://www.redhat.com/support/errata/RHSA-2004-392.html  View
58323 9023 CVE-2004-0595 REDHAT:RHSA-2004:395  View
58324 9023 CVE-2004-0595 URL:http://www.redhat.com/support/errata/RHSA-2004-395.html  View
58325 9023 CVE-2004-0595 REDHAT:RHSA-2004:405  View
58326 9023 CVE-2004-0595 URL:http://www.redhat.com/support/errata/RHSA-2004-405.html  View
58327 9023 CVE-2004-0595 REDHAT:RHSA-2005:816  View
58328 9023 CVE-2004-0595 URL:http://www.redhat.com/support/errata/RHSA-2005-816.html  View
58329 9023 CVE-2004-0595 SUSE:SUSE-SA:2004:021  View
58330 9023 CVE-2004-0595 URL:http://www.novell.com/linux/security/advisories/2004_21_php4.html  View
58331 9023 CVE-2004-0595 BUGTRAQ:20040722 [OpenPKG-SA-2004.034] OpenPKG Security Advisory (php)  View
58332 9023 CVE-2004-0595 URL:http://marc.info/?l=bugtraq&m=109051444105182&w=2  View
58333 9023 CVE-2004-0595 BID:10724  View
58334 9023 CVE-2004-0595 URL:http://www.securityfocus.com/bid/10724  View
58335 9023 CVE-2004-0595 OVAL:oval:org.mitre.oval:def:10619  View
58336 9023 CVE-2004-0595 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10619  View
58337 9023 CVE-2004-0595 XF:php-strip-tag-bypass(16692)  View

Related JVN