Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
PHP Other Vulnerability - CVE-2004-0595 - Vulnerability Database
PHP

PHP Other Vulnerability - CVE-2004-0595

Medium
Reference: CVE-2004-0595
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2004-0595
Title: PHP Other Vulnerability
Overview:

The strip_tags function in PHP 4.x up to 4.3.7 and 5.x up to 5.0.0RC3 does not filter null (0) characters within tag names when restricting input to allowed tags which allows dangerous tags to be processed by web browsers such as Internet Explorer and Safari which ignore null characters and facilitate the exploitation of cross-site scripting (XSS) vulnerabilities.