NetSight
IP …
medium6.1

CVE-2018-5712

An issue was discovered in PHP before 5.6.33, 7.0.x before 7.0.27, 7.1.x before 7.1.13, and 7.2.x before 7.2.1.

Impact

An issue was discovered in PHP before 5.6.33, 7.0.x before 7.0.27, 7.1.x before 7.1.13, and 7.2.x before 7.2.1. There is Reflected XSS on the PHAR 404 error page via the URI of a request for a .phar file.

Affected products

VendorProductAffected versions
PhpPhp
through 5.6.32
from 7.0.0 through 7.0.26
after 7.1.0 through 7.1.12
Version 7.2.0
DebianDebian Linux
Version 7.0
CanonicalUbuntu Linux
Versions 12.04, 14.04, 16.04, 17.10

Weakness classification

CWE-79

References