CVE-2007-3580

PHPIDS does not properly handle certain code containing newlines, as demonstrated by a try/catch block within a loop, which allows user-assisted remote attackers to inject arbitrary web script...

CVE-2007-3580

CVE-2007-3580 affects PHPIDS and is described as a vulnerability where certain code containing newlines within a loop (demonstrated by a try/catch block) is not properly handled, enabling user‑assisted remote attackers to inject arbitrary web script. The public records cite this as a cross‑site s...

CVE-2007-3579

CVE-2007-3579 affects PHPIDS prior to 20070703. The vulnerability arises because the system does not correctly handle setting the .text property of a SCRIPT element before it is attached to the DOM, enabling a remote attacker to inject arbitrary web script. The available documents confirm the aff...