PHP » PHP : Security Vulnerabilities Published In 2006 (XSS)

Published in:

2006 January February March April May June July August September October November December

CVSS Scores Greater Than: 0 1 2 3 4 5 6 7 8 9

Sort Results By : Publish Date Update Date CVE Number CVE Number CVSS Score EPSS Score

CVE-2006-0996

Cross-site scripting (XSS) vulnerability in phpinfo (info.c) in PHP 5.1.2 and 4.4.2 allows remote attackers to inject arbitrary web script or HTML via long array variables, including (1) a large number of dimensions or (2) long values, which prevents HTML tags from being removed.

Max Base Score	4.3
Published	2006-04-10
Updated	2017-10-11
EPSS	8.99%

CVE-2006-0208

Multiple cross-site scripting (XSS) vulnerabilities in PHP 4.4.1 and 5.1.1, when display_errors and html_errors are on, allow remote attackers to inject arbitrary web script or HTML via inputs to PHP applications that are not filtered when they are included in the resulting error message.

Max Base Score	2.6
Published	2006-01-13
Updated	2018-10-30
EPSS	0.76%

2 vulnerabilities found