Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The htmlspecialchars function in PHP before 5.2.12 does not properly handle (1) overlong UTF-8 sequences, (2) invalid Shift_JIS sequences, and (3) invalid EUC-JP sequences, which allows remote attackers to conduct cross-site scripting (XSS) attacks by placing a crafted byte sequence before a special character.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
PHP htmlspecialcharacters()畸形多字节字符跨站脚本漏洞
Vulnerability Description
PHP是广泛使用的通用目的脚本语言，特别适合于Web开发，可嵌入到HTML中。 PHP的htmlspecialchars()函数没有正确地过滤某些多字节字符输入，远程攻击者可以通过提交包含有特殊字符的请求序列执行跨站脚本攻击。
CVSS Information
N/A
Vulnerability Type
N/A