// For flags

CVE-2006-0996

PHP 4.x/5.0/5.1 - PHPInfo Large Input Cross-Site Scripting

Severity Score

6.1
*CVSS v3

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

2
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

Cross-site scripting (XSS) vulnerability in phpinfo (info.c) in PHP 5.1.2 and 4.4.2 allows remote attackers to inject arbitrary web script or HTML via long array variables, including (1) a large number of dimensions or (2) long values, which prevents HTML tags from being removed.

Vulnerabilidad de XSS en phpinfo (info.c) en PHP 5.1.2 y 4.4.2 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de variables de array largas incluyendo (1) un gran número de dimensiones o (2) valores largos, que impide que las etiquetas HTML de ser eliminadas.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Scope
Changed
Confidentiality
Low
Integrity
Low
Availability
None
Attack Vector
Network
Attack Complexity
Medium
Authentication
None
Confidentiality
None
Integrity
Partial
Availability
None
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2006-03-06 CVE Reserved
  • 2006-04-03 First Exploit
  • 2006-04-10 CVE Published
  • 2024-08-07 CVE Updated
  • 2025-03-30 EPSS Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
CWE
  • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CAPEC
References (37)
URL Tag Source
http://cvs.php.net/viewcvs.cgi/php-src/ext/standard/info.c X_refsource_confirm
http://marc.info/?l=php-cvs&m=114374620416389&w=2 Mailing List
http://securityreason.com/achievement_securityalert/34 Third Party Advisory
http://securityreason.com/securityalert/675 Third Party Advisory
http://securitytracker.com/id?1015879 Vdb Entry
http://support.avaya.com/elmodocs2/security/ASA-2006-129.htm X_refsource_confirm
http://support.avaya.com/elmodocs2/security/ASA-2006-160.htm X_refsource_confirm
http://www.osvdb.org/24484 Vdb Entry
http://www.php.net/ChangeLog-4.php#4.4.3 X_refsource_confirm
http://www.vupen.com/english/advisories/2006/1290 Vdb Entry
http://www.vupen.com/english/advisories/2006/2685 Vdb Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/25702 Vdb Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10997 Signature
URL Date SRC
https://www.exploit-db.com/exploits/27564 2006-04-03
http://www.securityfocus.com/bid/17362 2024-08-07
URL Date SRC
http://cvs.php.net/viewcvs.cgi/php-src/ext/standard/info.c?r1=1.260&r2=1.261 2017-10-11
URL Date SRC
ftp://patches.sgi.com/support/free/security/advisories/20060501-01-U.asc 2017-10-11
http://rhn.redhat.com/errata/RHSA-2006-0276.html 2017-10-11
http://rhn.redhat.com/errata/RHSA-2006-0549.html 2017-10-11
http://secunia.com/advisories/19599 2017-10-11
http://secunia.com/advisories/19775 2017-10-11
http://secunia.com/advisories/19832 2017-10-11
http://secunia.com/advisories/19979 2017-10-11
http://secunia.com/advisories/20052 2017-10-11
http://secunia.com/advisories/20210 2017-10-11
http://secunia.com/advisories/20222 2017-10-11
http://secunia.com/advisories/20951 2017-10-11
http://secunia.com/advisories/21125 2017-10-11
http://secunia.com/advisories/21252 2017-10-11
http://secunia.com/advisories/21564 2017-10-11
http://security.gentoo.org/glsa/glsa-200605-08.xml 2017-10-11
http://www.mandriva.com/security/advisories?name=MDKSA-2006:074 2017-10-11
http://www.novell.com/linux/security/advisories/05-05-2006.html 2017-10-11
http://www.redhat.com/support/errata/RHSA-2006-0501.html 2017-10-11
http://www.ubuntu.com/usn/usn-320-1 2017-10-11
https://access.redhat.com/security/cve/CVE-2006-0996 2006-07-27
https://bugzilla.redhat.com/show_bug.cgi?id=1618022 2006-07-27
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Php
Search vendor "Php"
 Php
Search vendor "Php" for product "Php"
 4.4.2
Search vendor "Php" for product "Php" and version "4.4.2"
-
Affected
Php
Search vendor "Php"
 Php
Search vendor "Php" for product "Php"
 5.1.2
Search vendor "Php" for product "Php" and version "5.1.2"
-
Affected