PT-2007-2702 · Php · Php

Published 2007-03-06 · Updated 2011-03-08 · CVE-2007-1287

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions PHP versions 4.4.3 through 4.4.6 PHP version 6.0 in CVS

Description The issue allows remote attackers to conduct cross-site scripting (XSS) attacks via GET, POST, or COOKIE array values, which are not escaped in the phpinfo output. This could enable a user to create a specially crafted URL that would execute arbitrary code in a user's browser within the trust relationship between the browser and the server, leading to a loss of integrity.

Recommendations For PHP versions 4.4.3 through 4.4.6, consider disabling the phpinfo function until a patch is available. For PHP version 6.0 in CVS, restrict access to the phpinfo output to minimize the risk of exploitation. Avoid using user-supplied arrays in GET, POST, or COOKIE variables upon submission to phpinfo() until the issue is resolved.

Exploit

Fix

Related Identifiers

CVE-2007-1287

Affected Products

Php

References · 11

• 🔥 http://php-security.org/MOPB/MOPB-08-2007.html · Exploit
• 🔥 https://exploit-db.com/exploits/3405 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-1287 · Security Note
• http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1287 · Note
• http://vupen.com/english/advisories/2007/2732 · Note
• http://securityfocus.com/bid/25159 · Note
• http://secunia.com/advisories/26235 · Note
• http://osvdb.org/32774 · Note
• http://us2.php.net/releases/4_4_7.php · Note
• http://docs.info.apple.com/article.html?artnum=306172 · Note