NVD

Id
59719  
Name
CVE-2006-0996  
Description
Cross-site scripting (XSS) vulnerability in phpinfo (info.c) in PHP 5.1.2 and 4.4.2 allows remote attackers to inject arbitrary web script or HTML via long array variables, including (1) a large number of dimensions or (2) long values, which prevents HTML tags from being removed.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2016-12-20  
Published
2006-04-10  
Modified Date
2016-10-17  
Seq
2006-0996  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
307165 59719 CVE-2006-0996 20060501-01-U  View
307166 59719 CVE-2006-0996 http://cvs.php.net/viewcvs.cgi/php-src/ext/standard/info.c  View
307167 59719 CVE-2006-0996 http://cvs.php.net/viewcvs.cgi/php-src/ext/standard/info.c?r1=1.260&r2=1.261  View
307168 59719 CVE-2006-0996 [php-cvs] 20060330 cvs: php-src /ext/standard info.c  View
307169 59719 CVE-2006-0996 oval:org.mitre.oval:def:10997  View
307170 59719 CVE-2006-0996 RHSA-2006:0276  View
307171 59719 CVE-2006-0996 RHSA-2006:0549  View
307172 59719 CVE-2006-0996 GLSA-200605-08  View
307173 59719 CVE-2006-0996 20060408 phpinfo() Cross Site Scripting PHP 5.1.2 and 4.4.2  View
307174 59719 CVE-2006-0996 675  View
307175 59719 CVE-2006-0996 1015879  View
307176 59719 CVE-2006-0996 http://support.avaya.com/elmodocs2/security/ASA-2006-129.htm  View
307177 59719 CVE-2006-0996 http://support.avaya.com/elmodocs2/security/ASA-2006-160.htm  View
307178 59719 CVE-2006-0996 MDKSA-2006:074  View
307179 59719 CVE-2006-0996 SUSE-SA:2006:024  View
307180 59719 CVE-2006-0996 http://www.php.net/ChangeLog-4.php#4.4.3  View
307181 59719 CVE-2006-0996 RHSA-2006:0501  View
307182 59719 CVE-2006-0996 17362  View
307183 59719 CVE-2006-0996 USN-320-1  View
307184 59719 CVE-2006-0996 ADV-2006-1290  View
307185 59719 CVE-2006-0996 ADV-2006-2685  View
307186 59719 CVE-2006-0996 php-phpinfo-long-array-xss(25702)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
57955 JVNDB-2006-000151 PHP の phpinfo() 関数におけるクロスサイトスクリプティングの脆弱性 ------------ CVE-2006-0996 17098 CVE-2006-0996 59719 2.6 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000151.html 2006-03-30 2007-04-01 View