CVE-2002-1954

CVE-2002-1954 is an XSS in the PHP 4.2.3 phpinfo function. The vulnerability allows remote attackers to inject arbitrary web script or HTML via the query string argument, demonstrated using soinfo.php. Affected software: PHP 4.2.3; vulnerable component: phpinfo output handling. Root cause: unsani...

CVE-2005-1954

CVE-2005-1954 affects the Singapore 0.9.11 application. Affected component appears to be PHP-based templates/files: admin.class.php and any .tpl.php under templates/admin_default/ or templates/default/. An error message reveals the filesystem path, enabling an attacker to obtain sensitive informa...

CVE-2004-1954

CVE-2004-1954 affects phProfession 2.5, with a vulnerability in modules.php that allows remote injection of arbitrary script/HTML via the jcode parameter (XSS). The provided documents specify the affected file and parameter but do not include mitigation, patch versions, or concrete exploit detail...

CVE-2002-1954

Cross-site scripting XSS vulnerability in the phpinfo function in PHP 4.2.3 allows remote attackers to inject arbitrary web script or HTML via the query string argument, as demonstrated using soinfo.php...