Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The strip_tags function in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, does not filter null (\0) characters within tag names when restricting input to allowed tags, which allows dangerous tags to be processed by web browsers such as Internet Explorer and Safari, which ignore null characters and facilitate the exploitation of cross-site scripting (XSS) vulnerabilities.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
PHP strip_tags（）函数绕过漏洞
Vulnerability Description
PHP 4.x到4.3.7版本，以及5.x到5.0.0RC3版本的strip_tags函数，当为允许标签输入限制时不能过滤在标签名称内空(\0)字符。Web浏览器如Internet Explorer和Safariweb可以处理危险标签，同时忽略空字符以及促进跨站脚本攻击(XSS)漏洞的利用。
CVSS Information
N/A
Vulnerability Type
N/A