2018-01-16 10:29:00 2019-08-19 13:15:14

An issue was discovered in PHP before 5.6.33, 7.0.x before 7.0.27, 7.1.x before 7.1.13, and 7.2.x before 7.2.1. There is Reflected XSS on the PHAR 404 error page via the URI of a request for a .phar file.

Vector

NETWORK

Complexity

MEDIUM

Authentication

NONE

Confidentiality

NONE

Integrity

PARTIAL

Availability

NONE
Php Php 7.0.5 Rc1 (not an official CPE) Php Php 7.0.5 - (not an official CPE) Php Php 7.0.5 (not an official CPE) Php Php 7.0.4 Rc1 (not an official CPE) Php Php 7.0.4 - (not an official CPE) Php Php 7.0.4 (not an official CPE) Php Php 7.0.3 Rc1 (not an official CPE) Php Php 7.0.3 - (not an official CPE) Php Php 7.0.3 (not an official CPE) Php Php 7.0.2 Rc1 (not an official CPE) Php Php 7.0.2 - (not an official CPE) Php Php 7.0.2 (not an official CPE) Php Php 7.0.1 Rc1 (not an official CPE) Php Php 7.0.1 - (not an official CPE) Php Php 7.0.1 (not an official CPE) Php Php 7.0.0 Rc8 (not an official CPE) Php Php 7.0.0 Rc7 (not an official CPE) Php Php 7.0.0 Rc6 (not an official CPE) Php Php 7.0.0 Rc5 (not an official CPE) Php Php 7.0.0 Rc4 (not an official CPE) Php Php 7.0.0 Rc3 (not an official CPE) Php Php 7.0.0 Rc2 (not an official CPE) Php Php 7.0.0 Rc1 (not an official CPE) Php Php 7.0.0 Beta3 (not an official CPE) Php Php 7.0.0 Beta2 (not an official CPE) Php Php 7.0.0 Beta1 (not an official CPE) Php Php 7.0.0 Alpha2 (not an official CPE) Php Php 7.0.0 Alpha1 (not an official CPE) Php Php 7.0.0 - (not an official CPE) Php Php 7.0.0 (not an official CPE) Php Php 5.6.32 (not an official CPE) Php Php 7.0.6 (not an official CPE) Php Php 7.0.6 - (not an official CPE) Php Php 7.0.6 Rc1 (not an official CPE) Php Php 7.0.7 (not an official CPE) Php Php 7.0.7 - (not an official CPE) Php Php 7.0.7 Rc1 (not an official CPE) Php Php 7.0.8 (not an official CPE) Php Php 7.0.8 - (not an official CPE) Php Php 7.0.8 Rc1 (not an official CPE) Php Php 7.0.9 (not an official CPE) Php Php 7.0.9 - (not an official CPE) Php Php 7.0.9 Rc1 (not an official CPE) Php Php 7.0.10 (not an official CPE) Php Php 7.0.10 - (not an official CPE) Php Php 7.0.10 Rc1 (not an official CPE) Php Php 7.0.11 (not an official CPE) Php Php 7.0.11 - (not an official CPE) Php Php 7.0.11 Rc1 (not an official CPE) Php Php 7.0.12 (not an official CPE) Php Php 7.0.12 - (not an official CPE) Php Php 7.0.12 Rc1 (not an official CPE) Php Php 7.0.13 (not an official CPE) Php Php 7.0.13 - (not an official CPE) Php Php 7.0.13 Rc1 (not an official CPE) Php Php 7.0.14 (not an official CPE) Php Php 7.0.14 - (not an official CPE) Php Php 7.0.14 Rc1 (not an official CPE) Php Php 7.0.15 (not an official CPE) Php Php 7.0.15 - (not an official CPE) Php Php 7.0.15 Rc1 (not an official CPE) Php Php 7.0.16 (not an official CPE) Php Php 7.0.16 - (not an official CPE) Php Php 7.0.16 Rc1 (not an official CPE) Php Php 7.0.17 (not an official CPE) Php Php 7.0.17 - (not an official CPE) Php Php 7.0.17 Rc1 (not an official CPE) Php Php 7.0.18 (not an official CPE) Php Php 7.0.18 - (not an official CPE) Php Php 7.0.18 Rc1 (not an official CPE) Php Php 7.0.19 (not an official CPE) Php Php 7.0.19 - (not an official CPE) Php Php 7.0.19 Rc1 (not an official CPE) Php Php 7.0.20 (not an official CPE) Php Php 7.0.20 - (not an official CPE) Php Php 7.0.20 Rc1 (not an official CPE) Php Php 7.0.21 (not an official CPE) Php Php 7.0.21 - (not an official CPE) Php Php 7.0.21 Rc1 (not an official CPE) Php Php 7.0.22 (not an official CPE) Php Php 7.0.22 - (not an official CPE) Php Php 7.0.22 Rc1 (not an official CPE) Php Php 7.0.23 (not an official CPE) Php Php 7.0.23 - (not an official CPE) Php Php 7.0.23 Rc1 (not an official CPE) Php Php 7.0.24 (not an official CPE) Php Php 7.0.24 - (not an official CPE) Php Php 7.0.24 Rc1 (not an official CPE) Php Php 7.0.25 (not an official CPE) Php Php 7.0.25 - (not an official CPE) Php Php 7.0.25 Rc1 (not an official CPE) Php Php 7.0.26 (not an official CPE) Php Php 7.0.26 - (not an official CPE) Php Php 7.0.26 Rc1 (not an official CPE) Php Php 7.1.1 (not an official CPE) Php Php 7.1.1 - (not an official CPE) Php Php 7.1.1 Rc1 (not an official CPE) Php Php 7.1.2 (not an official CPE) Php Php 7.1.2 - (not an official CPE) Php Php 7.1.2 Rc1 (not an official CPE) Php Php 7.1.3 (not an official CPE) Php Php 7.1.3 - (not an official CPE) Php Php 7.1.3 Rc1 (not an official CPE) Php Php 7.1.4 (not an official CPE) Php Php 7.1.4 - (not an official CPE) Php Php 7.1.4 Rc1 (not an official CPE) Php Php 7.1.5 (not an official CPE) Php Php 7.1.5 - (not an official CPE) Php Php 7.1.5 Rc1 (not an official CPE) Php Php 7.1.6 (not an official CPE) Php Php 7.1.6 - (not an official CPE) Php Php 7.1.6 Rc1 (not an official CPE) Php Php 7.1.7 (not an official CPE) Php Php 7.1.7 - (not an official CPE) Php Php 7.1.7 Rc1 (not an official CPE) Php Php 7.1.8 (not an official CPE) Php Php 7.1.8 - (not an official CPE) Php Php 7.1.8 Rc1 (not an official CPE) Php Php 7.1.9 (not an official CPE) Php Php 7.1.9 - (not an official CPE) Php Php 7.1.9 Rc1 (not an official CPE) Php Php 7.1.10 (not an official CPE) Php Php 7.1.10 - (not an official CPE) Php Php 7.1.10 Rc1 (not an official CPE) Php Php 7.1.11 (not an official CPE) Php Php 7.1.11 - (not an official CPE) Php Php 7.1.11 Rc1 (not an official CPE) Php Php 7.1.12 (not an official CPE) Php Php 7.1.12 - (not an official CPE) Php Php 7.1.12 Rc1 (not an official CPE) Php Php 7.2.0 (not an official CPE)