EDB-24280
functionalPHP 4.x/5.0 - 'Strip_Tags()' Function Bypass
view exploit source exploit_dbverifiedtype remoteauthor Stefan Esserpublished 2004-07-14catalog exploit_db
01
exploited CVEs (1)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2004-0595US | medium6.8 | Exploit | ||
The strip_tags function in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, does not filter null (\0) characters within tag names when restricting input to allowed tags, which allows d… | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan