NVD

Id
58948  
Name
CVE-2006-0208  
Description
Multiple cross-site scripting (XSS) vulnerabilities in PHP 4.4.1 and 5.1.1, when display_errors and html_errors are on, allow remote attackers to inject arbitrary web script or HTML via inputs to PHP applications that are not filtered when they are included in the resulting error message.  
Reject
 
CVSS Version
2  
CVSS Score
2.6  
Severity
Low  
CVSS Base Score
2.6  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:N/I:P/A:N)  
Pub Date
2016-12-20  
Published
2006-01-13  
Modified Date
2011-09-13  
Seq
2006-0208  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
302705 58948 CVE-2006-0208 20060501-01-U  View
302706 58948 CVE-2006-0208 SUSE-SR:2006:004  View
302707 58948 CVE-2006-0208 oval:org.mitre.oval:def:10064  View
302708 58948 CVE-2006-0208 RHSA-2006:0276  View
302709 58948 CVE-2006-0208 RHSA-2006:0549  View
302710 58948 CVE-2006-0208 http://support.avaya.com/elmodocs2/security/ASA-2006-129.htm  View
302711 58948 CVE-2006-0208 http://support.avaya.com/elmodocs2/security/ASA-2006-160.htm  View
302712 58948 CVE-2006-0208 GLSA-200603-22  View
302713 58948 CVE-2006-0208 MDKSA-2006:028  View
302714 58948 CVE-2006-0208 http://www.php.net/ChangeLog-4.php#4.4.2  View
302715 58948 CVE-2006-0208 http://www.php.net/release_5_1_2.php  View
302716 58948 CVE-2006-0208 RHSA-2006:0501  View
302717 58948 CVE-2006-0208 16803  View
302718 58948 CVE-2006-0208 USN-261-1  View
302719 58948 CVE-2006-0208 ADV-2006-0177  View
302720 58948 CVE-2006-0208 ADV-2006-0369  View
302721 58948 CVE-2006-0208 ADV-2006-2685  View
302722 58948 CVE-2006-0208 https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=178028  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
57820 JVNDB-2006-000016 PHP の HTML エラーメッセージの生成処理におけるクロスサイトスクリプティングの脆弱性 PHP には、display_errors および html_errors ディレクティブが両方とも有効となっている場合、HTML エラーメッセージを生成する際、メッセージのサニタイズ処理が適切に行われないため、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2006-0208 16310 CVE-2006-0208 58948 2.6 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000016.html 2006-01-11 2007-04-01 View