DeutschShown in its original language — a full translation is planned for a future version.
PHP: Schwachstelle ermöglicht Cross-Site Scripting
view advisory published 2018-01-16
Ein entfernter, anonymer Angreifer kann eine Schwachstelle in PHP ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2018-5712US | medium6.1 | — | ||
An issue was discovered in PHP before 5.6.33, 7.0.x before 7.0.27, 7.1.x before 7.1.13, and 7.2.x before 7.2.1. There is Reflected XSS on the PHAR 404 error page via the URI of a r… | ||||
02
references
External citations — patches, advisories, analysis.
- PHP Change Log #5.6.33 vom 2018-01-04external
- PHP Change Log #7.2.1 vom 2018-01-04external
- Debian Security Advisory DSA-4240 vom 2018-07-06external
- Ubuntu Security Notice USN-3566-1 vom 2018-02-12external
- Red Hat Security Advisory RHSA-2018:1296 vom 2018-05-04external
- Red Hat Security Advisory RHSA-2019:2519 vom 2019-08-19external
- Red Hat Security Advisory RHSA-2020:1112 vom 2020-03-31external
- Amazon Linux Security Advisory ALAS-2018-946 vom 2024-04-29external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan