CVE-2007-3577

CVE-2007-3577 affects PHPIDS prior to 20070703. The vulnerability arises from improper handling of the substr method in multiple contexts (document.location.search, document.referrer, document.location.hash, window[eval and similar expressions, Function expressions, certain '=' expressions such a...

CVE-2007-3580

PHPIDS does not properly handle certain code containing newlines, as demonstrated by a try/catch block within a loop, which allows user-assisted remote attackers to inject arbitrary web script...

CVE-2007-3580

CVE-2007-3580 affects PHPIDS and is described as a vulnerability where certain code containing newlines within a loop (demonstrated by a try/catch block) is not properly handled, enabling user‑assisted remote attackers to inject arbitrary web script. The public records cite this as a cross‑site s...