PT-2007-2848 · Php · Php

Published 2007-03-14 · Updated 2008-09-05 · CVE-2007-1454

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions PHP version 5.2.0

Description The issue allows remote attackers to conduct cross-site scripting (XSS) attacks. This is possible because the ext/filter in PHP does not properly strip HTML tags when FILTER SANITIZE STRING is used with the FILTER FLAG STRIP LOW flag, specifically with HTML containing a '<' character followed by certain whitespace characters. This can lead to a situation where the filter passes the input but it is collapsed into a valid tag, thus enabling the XSS attack.

Recommendations For PHP version 5.2.0, consider disabling the use of FILTER SANITIZE STRING with the FILTER FLAG STRIP LOW flag until a proper fix is available, or apply alternative sanitization methods to prevent XSS attacks.

Fix

Related Identifiers

CVE-2007-1454

DSA-1283-1

DTSA-39-1

Affected Products

Php

References · 9

• http://debian.org/security/2007/dsa-1283 · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDKSA-2007:090 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-1454 · Security Note
• http://novell.com/linux/security/advisories/2007_32_php.html · Vendor Advisory
• http://securityfocus.com/bid/22914 · Note
• http://secunia.com/advisories/25056 · Note
• http://secunia.com/advisories/25062 · Note
• http://php-security.org/MOPB/MOPB-18-2007.html · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1454 · Note