Lucene search

K
ubuntucveUbuntu.comUB:CVE-2005-3388
HistoryNov 01, 2005 - 12:00 a.m.

CVE-2005-3388

2005-11-0100:00:00
ubuntu.com
ubuntu.com
11

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.826 High

EPSS

Percentile

98.4%

Cross-site scripting (XSS) vulnerability in the phpinfo function in PHP 4.x
up to 4.4.0 and 5.x up to 5.0.5 allows remote attackers to inject arbitrary
web script or HTML via a crafted URL with a “stacked array assignment.”

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchphp4< 4.4.2-1build1UNKNOWN
ubuntu6.10noarchphp4< 4.4.2-1build1UNKNOWN
ubuntu6.06noarchphp5< 5.1.2-1ubuntu3.9UNKNOWN
ubuntu6.10noarchphp5< 5.1.6-1ubuntu2.6UNKNOWN
ubuntu7.04noarchphp5< 5.2.1-0ubuntu1.4UNKNOWN

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.826 High

EPSS

Percentile

98.4%