CVE-2005-3388

Cross-site scripting (XSS) vulnerability in the phpinfo function in PHP 4.x up to 4.4.0 and 5.x up to 5.0.5 allows remote attackers to inject arbitrary web…

published November 1, 2005

CVSS
—
EPSS
49%
Percentile
98.9
In the wild
Unconfirmed
What it is

Cross-site scripting (XSS) vulnerability in the phpinfo function in PHP 4.x up to 4.4.0 and 5.x up to 5.0.5 allows remote attackers to inject arbitrary web script or HTML via a crafted URL with a "stacked array assignment."

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.48895 · 98.9th percentile
Published
2005-11-01T02:00Z
EPSS history
Timeline
  • 01 NOV 02:00Z
    Cross-site scripting (XSS) vulnerability in the phpinfo function in PHP 4.x up to 4.4.0 and 5.x up to 5.0.5 allows remote attackers to inject arbitrary web…
    cvelistv5