Lucene search

K
ubuntucveUbuntu.comUB:CVE-2006-0208
HistoryJan 13, 2006 - 12:00 a.m.

CVE-2006-0208

2006-01-1300:00:00
ubuntu.com
ubuntu.com
13

2.6 Low

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

0.008 Low

EPSS

Percentile

80.9%

Multiple cross-site scripting (XSS) vulnerabilities in PHP 4.4.1 and 5.1.1,
when display_errors and html_errors are on, allow remote attackers to
inject arbitrary web script or HTML via inputs to PHP applications that are
not filtered when they are included in the resulting error message.

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchphp4< 4.4.2-1build1UNKNOWN
ubuntu6.10noarchphp4< 4.4.2-1build1UNKNOWN
ubuntu6.06noarchphp5< 5.1.2-1ubuntu3.9UNKNOWN
ubuntu6.10noarchphp5< 5.1.6-1ubuntu2.6UNKNOWN
ubuntu7.04noarchphp5< 5.2.1-0ubuntu1.4UNKNOWN

2.6 Low

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

0.008 Low

EPSS

Percentile

80.9%