The vulnerability in the phphandler function of the SAPI Apache2 PHP interpreter involves improper input handling during web page generation, allowing a malicious actor to perform cross-site scripting attacks.

Vulnerability in phphandler of the apache php interpreter allows remote XSS via improper input handling.

Reporter	Title	Published	Views	Family All 128
IBM Security Bulletins	Security Bulletin: IBM Flex System Chassis Management Module (CMM) is affected by vulnerabilities in PHP (CVE-2018-17082 CVE-2018-14883 CVE-2018-14851 CVE-2017-9118)	7 Dec 202322:45	–	ibm
IBM Security Bulletins	Security Bulletin: IBM BladeCenter Advanced Management Module (AMM) is affected by vulnerability in PHP (CVE-2018-17082)	11 Apr 201922:50	–	ibm
Amazon	Medium: php56, php70, php71, php72	17 Oct 201800:00	–	amazon
Tenable Nessus	Amazon Linux AMI : php56 / php70, php71, php72 (ALAS-2018-1090)	19 Oct 201800:00	–	nessus
Tenable Nessus	Debian DLA-1509-1 : php5 security update	20 Sep 201800:00	–	nessus
Tenable Nessus	Debian DSA-4353-1 : php7.0 - security update	11 Dec 201800:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP5 : php (EulerOS-SA-2019-1984)	24 Sep 201900:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP2 : php (EulerOS-SA-2019-2438)	4 Dec 201900:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP3 : php (EulerOS-SA-2019-2649)	18 Dec 201900:00	–	nessus
Tenable Nessus	EulerOS Virtualization 3.0.6.0 : php (EulerOS-SA-2020-1747)	1 Jul 202000:00	–	nessus

Vulners

Node

php_group phpRange<5.6.38

php_group phpRange7.0.0–7.0.32

php_group phpRange7.1.0–7.1.22

php_group phpRange7.2.0–7.2.10

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2018-17082
security-tracker	www.security-tracker.debian.org/tracker/CVE-2018-17082
bugs	www.bugs.php.net/bug.php
wiki	www.wiki.astralinux.ru/astra-linux-se16-bulletin-20220829SE16
web	www.web.nvd.nist.gov/view/vuln/detail

30 Sep 2024 00:00Current

6.5Medium risk

Vulners AI Score6.5

CVSS 24.3

CVSS 36.1

EPSS0.04103