blogsafe.org My Downloads

BlogSafe.org

PHP CVEs

Vulnerabilities in the PHP language itself, and which PHP versions they affect.

← Back to CVE list

CVE-2006-0208

LOW 2.6 CVSS 2.0
Published
January 13, 2006
Last modified
June 16, 2026
NVD status
Modified
Reported by
cve@mitre.org
Weakness
CWE-79
CVSS vector
AV:N/AC:H/Au:N/C:N/I:P/A:N

Description

Multiple cross-site scripting (XSS) vulnerabilities in PHP 4.4.1 and 5.1.1, when display_errors and html_errors are on, allow remote attackers to inject arbitrary web script or HTML via inputs to PHP applications that are not filtered when they are included in the resulting error message.

Affected products and versions

  • PHP versions 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.5, 4.0.6, 4.0beta1, 4.0beta2, 4.0beta3, 4.0beta4, 4.0beta_4_patch1, 4.0rc1, 4.0rc2, 4.1.0, 4.1.1, 4.1.2, 4.2.0, 4.2.1, 4.2.2, 4.2.3, 4.3.0, 4.3.1, 4.3.2, 4.3.3, 4.3.4, 4.3.5, 4.3.6, 4.3.7, 4.3.8, 4.3.9, 4.3.10, 4.3.11, 4.4.1, 4.4.2, 5.0.0, 5.0.0beta1, 5.0.0beta2, 5.0.0beta3, 5.0.0rc1, 5.0.0rc2, 5.0.0rc3, 5.0.1, 5.0.2, 5.0.3, 5.0.4, 5.0.5, 5.1.0, 5.1.1

References

  • lists.suse.de http://lists.suse.de/archive/suse-security-announce/2006-Feb/0008.html
  • rhn.redhat.com http://rhn.redhat.com/errata/RHSA-2006-0276.html
  • rhn.redhat.com http://rhn.redhat.com/errata/RHSA-2006-0549.html Vendor Advisory
  • secunia.com http://secunia.com/advisories/18431 Patch, Vendor Advisory
  • secunia.com http://secunia.com/advisories/18697 Patch, Vendor Advisory
  • secunia.com http://secunia.com/advisories/19012 Vendor Advisory
  • secunia.com http://secunia.com/advisories/19179 Patch, Vendor Advisory
  • secunia.com http://secunia.com/advisories/19355 Patch, Vendor Advisory
  • secunia.com http://secunia.com/advisories/19832 Vendor Advisory
  • secunia.com http://secunia.com/advisories/20210 Vendor Advisory
  • secunia.com http://secunia.com/advisories/20222 Vendor Advisory
  • secunia.com http://secunia.com/advisories/20951 Vendor Advisory
  • secunia.com http://secunia.com/advisories/21252 Vendor Advisory
  • secunia.com http://secunia.com/advisories/21564 Vendor Advisory
  • support.avaya.com http://support.avaya.com/elmodocs2/security/ASA-2006-129.htm
  • support.avaya.com http://support.avaya.com/elmodocs2/security/ASA-2006-160.htm
  • www.gentoo.org http://www.gentoo.org/security/en/glsa/glsa-200603-22.xml Patch, Vendor Advisory
  • www.mandriva.com http://www.mandriva.com/security/advisories?name=MDKSA-2006:028
  • www.php.net http://www.php.net/ChangeLog-4.php#4.4.2
  • www.php.net http://www.php.net/release_5_1_2.php Patch
  • www.redhat.com http://www.redhat.com/support/errata/RHSA-2006-0501.html Vendor Advisory
  • www.securityfocus.com http://www.securityfocus.com/bid/16803 Patch
  • www.vupen.com http://www.vupen.com/english/advisories/2006/0177 Vendor Advisory
  • www.vupen.com http://www.vupen.com/english/advisories/2006/0369 Vendor Advisory
  • www.vupen.com http://www.vupen.com/english/advisories/2006/2685 Vendor Advisory
  • bugzilla.redhat.com https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=178028
  • oval.cisecurity.org https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10064
  • usn.ubuntu.com https://usn.ubuntu.com/261-1/
  • nvd.nist.gov Official NVD record