CVE-2006-0996

PHP 4.x/5.0/5.1 - PHPInfo Large Input Cross-Site Scripting

Severity Score

4.3

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

Cross-site scripting (XSS) vulnerability in phpinfo (info.c) in PHP 5.1.2 and 4.4.2 allows remote attackers to inject arbitrary web script or HTML via long array variables, including (1) a large number of dimensions or (2) long values, which prevents HTML tags from being removed.

Vulnerabilidad de XSS en phpinfo (info.c) en PHP 5.1.2 y 4.4.2 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de variables de array largas incluyendo (1) un gran número de dimensiones o (2) valores largos, que impide que las etiquetas HTML de ser eliminadas.

*Credits: N/A

CVSS Scores

NISTv2 4.3

Attack Vector

Network

Attack Complexity

Medium

Authentication

None

Confidentiality

None

Integrity

Partial

Availability

None

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2006-03-06 CVE Reserved
2006-04-03 First Exploit
2006-04-10 CVE Published
2024-07-30 EPSS Updated
2024-08-07 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date

CWE

CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CAPEC

References (37)

URL	Tag	Source
http://cvs.php.net/viewcvs.cgi/php-src/ext/standard/info.c	X_refsource_confirm
http://marc.info/?l=php-cvs&m=114374620416389&w=2	Mailing List
http://securityreason.com/achievement_securityalert/34	Third Party Advisory
http://securityreason.com/securityalert/675	Third Party Advisory
http://securitytracker.com/id?1015879	Vdb Entry
http://support.avaya.com/elmodocs2/security/ASA-2006-129.htm	X_refsource_confirm
http://support.avaya.com/elmodocs2/security/ASA-2006-160.htm	X_refsource_confirm
http://www.osvdb.org/24484	Vdb Entry
http://www.php.net/ChangeLog-4.php#4.4.3	X_refsource_confirm
http://www.vupen.com/english/advisories/2006/1290	Vdb Entry
http://www.vupen.com/english/advisories/2006/2685	Vdb Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/25702	Vdb Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10997	Signature

URL	Date	SRC
https://www.exploit-db.com/exploits/27564	2006-04-03
http://www.securityfocus.com/bid/17362	2024-08-07

URL	Date	SRC
http://cvs.php.net/viewcvs.cgi/php-src/ext/standard/info.c?r1=1.260&r2=1.261	2017-10-11

URL	Date	SRC
ftp://patches.sgi.com/support/free/security/advisories/20060501-01-U.asc	2017-10-11
http://rhn.redhat.com/errata/RHSA-2006-0276.html	2017-10-11
http://rhn.redhat.com/errata/RHSA-2006-0549.html	2017-10-11
http://secunia.com/advisories/19599	2017-10-11
http://secunia.com/advisories/19775	2017-10-11
http://secunia.com/advisories/19832	2017-10-11
http://secunia.com/advisories/19979	2017-10-11
http://secunia.com/advisories/20052	2017-10-11
http://secunia.com/advisories/20210	2017-10-11
http://secunia.com/advisories/20222	2017-10-11
http://secunia.com/advisories/20951	2017-10-11
http://secunia.com/advisories/21125	2017-10-11
http://secunia.com/advisories/21252	2017-10-11
http://secunia.com/advisories/21564	2017-10-11
http://security.gentoo.org/glsa/glsa-200605-08.xml	2017-10-11
http://www.mandriva.com/security/advisories?name=MDKSA-2006:074	2017-10-11
http://www.novell.com/linux/security/advisories/05-05-2006.html	2017-10-11
http://www.redhat.com/support/errata/RHSA-2006-0501.html	2017-10-11
http://www.ubuntu.com/usn/usn-320-1	2017-10-11
https://access.redhat.com/security/cve/CVE-2006-0996	2006-07-27
https://bugzilla.redhat.com/show_bug.cgi?id=1618022	2006-07-27

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Php Search vendor "Php"		Php Search vendor "Php" for product "Php"				4.4.2 Search vendor "Php" for product "Php" and version "4.4.2"		-		Affected
Php Search vendor "Php"		Php Search vendor "Php" for product "Php"				5.1.2 Search vendor "Php" for product "Php" and version "5.1.2"		-		Affected