Mac OS X Multiple Vulnerabilities (Security Update 2007-007)

The remote host is running a version of Mac OS X 10.4 or 10.3 which does not have the security update 2007-007 applied. This update contains several security fixes for the following programs : - bzip2 - CFNetwork - CoreAudio - cscope - gnuzip - iChat - Kerberos - mDNSResponder - PDFKit - PHP -...

CVE-2007-1287

CVE-2007-1287 describes a regression in PHP’s phpinfo output allowing cross-site scripting via unescaped GET/POST/COOKIE array values. Affects PHP 4.4.3–4.4.6 and PHP 6.0 in CVS; vulnerability stems from not escaping values in the phpinfo output, reusing the XSS issue originally addressed by CVE-...