medium6.8Public exploit code

CVE-2004-0595

The strip_tags function in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, does not filter null (\0) characters within tag names when restricting input to allowed…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

PHP 4.x/5.0 - 'Strip_Tags()' Function Bypass2004-07-14 · remote · php · Verified

Impact

The strip_tags function in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, does not filter null (\0) characters within tag names when restricting input to allowed tags, which allows dangerous tags to be processed by web browsers such as Internet Explorer and Safari, which ignore null characters and facilitate the exploitation of cross-site scripting (XSS) vulnerabilities.

Affected products

Vendor	Product	Affected versions
Avaya	Converged Communications Server	Version 2.0
Redhat	Fedora Core	Versions core_1.0, core_2.0
Trustix	Secure Linux	Versions 1.5, 2.0, 2.1
Avaya	Integrated Management	All versions
Php	Php	Versions 4.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.5
Avaya	S8300	Versions r2.0.0, r2.0.1
Avaya	S8500	Versions r2.0.0, r2.0.1
Avaya	S8700	Versions r2.0.0, r2.0.1

Public exploit code

Impact

Affected products

References