medium4.3
CVE-2007-3578
PHPIDS before 20070703 does not properly handle (1) arithmetic expressions and (2) unclosed comments, which allows remote attackers to inject arbitrary web scr…
Impact
PHPIDS before 20070703 does not properly handle (1) arithmetic expressions and (2) unclosed comments, which allows remote attackers to inject arbitrary web script.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Phpids | Phpids | All versions |
References
- NVD record
- CVE.org record
- http://groups.google.com/group/php-ids/browse_thread/thread/3ec15f69d6b3dba0
- http://osvdb.org/45757
- http://osvdb.org/45758
- http://sla.ckers.org/forum/read.php?2%2C13209%2C13218
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35519
- http://groups.google.com/group/php-ids/browse_thread/thread/3ec15f69d6b3dba0
- http://osvdb.org/45757
- http://osvdb.org/45758
- http://sla.ckers.org/forum/read.php?2%2C13209%2C13218
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35519