CVE-2007-3998

The wordwrap function in PHP 4 before 4.4.8, and PHP 5 before 5.2.4, does not properly use the breakcharlen variable, which allows remote attackers to cause a denial of service divide-by-zero error and application crash, or infinite loop via certain arguments, as demonstrated by a 'chr0, 0, ""'...

CVE-2006-3998

CVE-2006-3998 is a PHP remote file inclusion vulnerability in WoWRoster (World of Warcraft Roster) before or equal to version 1.5.1, arising from conf.php. An attacker can cause remote code execution by supplying a URL in the subdir parameter. The vulnerability is supported by NVD (CVSSv2 base sc...

CVE-2005-3998

CVE-2005-3998 is an XSS vulnerability in Solupress News 1.0 and earlier, occurring in the search.asp component when processing the keywords parameter. The provided sources indicate an unauthenticated remote attacker could inject arbitrary script or HTML via this input, leading to potential client...