CVE-2005-3388: CVE-2005-3388

Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2005-3388

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

N/A

Source: NVD (National Vulnerability Database)

Vulnerability Description

Cross-site scripting (XSS) vulnerability in the phpinfo function in PHP 4.x up to 4.4.0 and 5.x up to 5.0.5 allows remote attackers to inject arbitrary web script or HTML via a crafted URL with a "stacked array assignment."

Source: NVD (National Vulnerability Database)

CVSS Information

N/A

Source: NVD (National Vulnerability Database)

Vulnerability Type

N/A

Source: NVD (National Vulnerability Database)

Vulnerability Title

PHP phpinfo()跨站脚本漏洞

Source: CNNVD (China National Vulnerability Database)

Vulnerability Description

PHP是广泛使用的通用目的脚本语言，特别适合于Web开发，可嵌入到HTML中。 PHP的phpinfo()函数可输出大量的有关PHP当前状态的信息，如PHP版本，服务器信息和环境等。由于phpinfo()会向浏览器泄漏很多信息，因此不建议在生产服务器中存在执行phpinfo()的脚本。但实际上很多服务器中都运行有phpinfo()脚本。攻击者可以通过包含有栈数组分配的特制URL向phpinfo()输出中注入HTML代码，导致泄漏域cookies，如会话标识符。

Source: CNNVD (China National Vulnerability Database)

CVSS Information

N/A

Source: CNNVD (China National Vulnerability Database)

Vulnerability Type

N/A

Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
-	n/a	n/a	-

II. Public POCs for CVE-2005-3388

#	POC Description	Source Link	Shenlong Link

AI-Generated POCPremium

No public POC found.

III. Intelligence Information for CVE-2005-3388

Please Login to view more intelligence information

http://www.php.net/release_4_4_1.phpx_refsource_CONFIRM
http://www.hardened-php.net/advisory_182005.77.htmlx_refsource_MISC
http://support.avaya.com/elmodocs2/security/ASA-2006-037.htmx_refsource_CONFIRM
http://securityreason.com/securityalert/133third-party-advisoryx_refsource_SREASON
http://secunia.com/advisories/21252third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/18669third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/17559third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/18198third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/17531third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/bid/15248vdb-entryx_refsource_BID
http://secunia.com/advisories/22691third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/17510third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/17557third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/17371third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/17490third-party-advisoryx_refsource_SECUNIA
http://securitytracker.com/id?1015130vdb-entryx_refsource_SECTRACK
https://www.ubuntu.com/usn/usn-232-1/vendor-advisoryx_refsource_UBUNTU
http://itrc.hp.com/service/cki/docDisplay.do?docId=c00786522vendor-advisoryx_refsource_HP
http://www.fedoralegacy.org/updates/FC2/2005-11-28-FLSA_2005_166943__Updated_php_packages_fix_security_issues.htmlvendor-advisoryx_refsource_FEDORA
http://www.turbolinux.com/security/2006/TLSA-2006-38.txtvendor-advisoryx_refsource_TURBO
http://www.vupen.com/english/advisories/2006/4320vdb-entryx_refsource_VUPEN
http://www.vupen.com/english/advisories/2005/2254vdb-entryx_refsource_VUPEN
http://www.redhat.com/support/errata/RHSA-2005-831.htmlvendor-advisoryx_refsource_REDHAT
http://www.redhat.com/support/errata/RHSA-2005-838.htmlvendor-advisoryx_refsource_REDHAT
http://www.mandriva.com/security/advisories?name=MDKSA-2005:213vendor-advisoryx_refsource_MANDRIVA
http://www.gentoo.org/security/en/glsa/glsa-200511-08.xmlvendor-advisoryx_refsource_GENTOO
http://rhn.redhat.com/errata/RHSA-2006-0549.htmlvendor-advisoryx_refsource_REDHAT
http://www.openpkg.org/security/OpenPKG-SA-2005.027-php.htmlvendor-advisoryx_refsource_OPENPKG
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PIRZJHM6UDNWNHZ3PCMEZ2YUK3CWY2UE/vendor-advisoryx_refsource_FEDORA
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10542vdb-entrysignaturex_refsource_OVAL
http://www.securityfocus.com/archive/1/415292mailing-listx_refsource_BUGTRAQ
https://nvd.nist.gov/vuln/detail/CVE-2005-3388

IV. Related Vulnerabilities

Same product: n/a

Same vendor: n/a

V. Comments for CVE-2005-3388

No comments yet

Goal Reached Thanks to every supporter — we hit 100%!

I. Basic Information for CVE-2005-3388

Vulnerability Information

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Affected Products

II. Public POCs for CVE-2005-3388

III. Intelligence Information for CVE-2005-3388

IV. Related Vulnerabilities

V. Comments for CVE-2005-3388

Leave a comment