CVE-2007-3577

PHPIDS before 20070703 does not properly handle use of the substr method in 1 document.location.search and 2 document.referrer; 3 certain use of document.location.hash; 4 certain "windoweval" and similar expressions; 5 certain Function expressions; 6 certain '=' expressions, as demonstrated by a...

CVE-2007-3580

CVE-2007-3580 affects PHPIDS and is described as a vulnerability where certain code containing newlines within a loop (demonstrated by a try/catch block) is not properly handled, enabling user‑assisted remote attackers to inject arbitrary web script. The public records cite this as a cross‑site s...

CVE-2007-3577

CVE-2007-3577 affects PHPIDS prior to 20070703. The vulnerability arises from improper handling of the substr method in multiple contexts (document.location.search, document.referrer, document.location.hash, window[eval and similar expressions, Function expressions, certain '=' expressions such a...

CVE-2007-3579

CVE-2007-3579 affects PHPIDS prior to 20070703. The vulnerability arises because the system does not correctly handle setting the .text property of a SCRIPT element before it is attached to the DOM, enabling a remote attacker to inject arbitrary web script. The available documents confirm the aff...

CVE-2007-3580

PHPIDS does not properly handle certain code containing newlines, as demonstrated by a try/catch block within a loop, which allows user-assisted remote attackers to inject arbitrary web script...

CVE-2007-3580: Undefined Security Weakness

PHPIDS does not properly handle certain code containing newlines, as demonstrated by a try/catch block within a loop, which allows user-assisted remote attackers to inject arbitrary web script...

CVE-2007-3579: Undefined Security Weakness

PHPIDS before 20070703 does not properly handle setting the .text property of a SCRIPT element before its attachment to the DOM, which allows remote attackers to inject arbitrary web script...

CVE-2007-3577: Undefined Security Weakness

PHPIDS before 20070703 does not properly handle use of the substr method in 1 document.location.search and 2 document.referrer; 3 certain use of document.location.hash; 4 certain "windoweval" and similar expressions; 5 certain Function expressions; 6 certain '=' expressions, as demonstrated by a...

CVE-2007-3578: Undefined Security Weakness

PHPIDS before 20070703 does not properly handle 1 arithmetic expressions and 2 unclosed comments, which allows remote attackers to inject arbitrary web script...