PHP » PHP : Security Vulnerabilities Published In 2016 (XSS)

Published in:

2016 January February March April May June July August September October November December

CVSS Scores Greater Than: 0 1 2 3 4 5 6 7 8 9

Sort Results By : Publish Date Update Date CVE Number CVE Number CVSS Score EPSS Score

CVE-2015-8935

The sapi_header_op function in main/SAPI.c in PHP before 5.4.38, 5.5.x before 5.5.22, and 5.6.x before 5.6.6 supports deprecated line folding without considering browser compatibility, which allows remote attackers to conduct cross-site scripting (XSS) attacks against Internet Explorer by leveraging (1) %0A%20 or (2) %0D%0A%20 mishandling in the header function.

Max Base Score	6.1
Published	2016-08-07
Updated	2018-01-05
EPSS	0.34%

1 vulnerabilities found