VDB
CVE-2006-0208
CVE-2006-0208
PUBLISHED
CVSS 2.5999999046325684 LOW
Multiple cross-site scripting (XSS) vulnerabilities in PHP 4.4.1 and 5.1.1, when display_errors and html_errors are on, allow remote attackers to inject arbitrary web script or HTML via inputs to PHP applications that are not filtered when they are included in the resulting error message.
EPSS 3.77% · 88.9th percentile
Risk Scores
CVSS 2.0
2.5999999046325684
EPSS Score
3.77%
88.9th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| php | php | 4.0, 4.0.5, 4.0.4 |
| n/a | n/a | n/a |
Timeline
- Jan 13, 2006 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- Jul 12, 2022 EPSS Score
- Sep 4, 2022 EPSS Score
- Dec 18, 2022 EPSS Score
- Feb 9, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- May 26, 2023 EPSS Score
- Jul 17, 2023 EPSS Score
- Sep 8, 2023 EPSS Score
- Dec 22, 2023 EPSS Score
References
- 19355 third-party-advisory
- 21252 third-party-advisory
- USN-261-1 vendor-advisory
- SUSE-SR:2006:004 vendor-advisory
- 20222 third-party-advisory
- ADV-2006-0369 vdb
- GLSA-200603-22 vendor-advisory
- RHSA-2006:0501 vendor-advisory
- RHSA-2006:0549 vendor-advisory
- 19832 third-party-advisory
- 16803 vdb
- 21564 third-party-advisory
- http://www.php.net/ChangeLog-4.php#4.4.2 url
- 20951 third-party-advisory
- http://support.avaya.com/elmodocs2/security/ASA-2006-129.htm url
- 20060501-01-U vendor-advisory
- oval:org.mitre.oval:def:10064 vdb
- MDKSA-2006:028 vendor-advisory
- http://rhn.redhat.com/errata/RHSA-2006-0276.html technical
- http://www.vupen.com/english/advisories/2006/0177 advisory
…and 11 more