CVE-2002-1954
medium · 4.3Cross-site scripting (XSS) vulnerability in the phpinfo function in PHP 4.2.3 allows remote attackers to inject arbitrary web script or HTML via the query string argument, as demonstrated using soinfo.php.
4.3
CVSS
11.9%
EPSS (exploit prob.)
96th
EPSS percentile
2002-12-31
Published
AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| php | php | 4.2.3 |
Check a specific version with /api/v1/cve/match.
References
- http://archives.neohapsis.com/archives/bugtraq/2003-06/0027.html
- http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0021.html
- http://www.iss.net/security_center/static/10355.php
- http://www.techie.hopto.org/vulns/2002-36.txt
- http://archives.neohapsis.com/archives/bugtraq/2003-06/0027.html
- http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0021.html
- http://www.iss.net/security_center/static/10355.php
- http://www.techie.hopto.org/vulns/2002-36.txt
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2002-1954