EDB-22696

functional

PHP 4.x - Transparent Session ID Cross-Site Scripting

view exploit source exploit_dbverifiedtype remoteauthor Sverre H. Husebypublished 2003-05-30catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2003-0442USmedium4.3Exploit
Cross-site scripting (XSS) vulnerability in the transparent SID support capability for PHP before 4.3.2 (session.use_trans_sid) allows remote attackers to insert arbitrary script v…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan