Oval Definition:oval:org.mitre.oval:def:485
Revision Date:2007-04-25Version:19
Title:PH Cross-site Scripting Vulnerability
Description:Cross-site scripting (XSS) vulnerability in the transparent SID support capability for PHP before 4.3.2 (session.use_trans_sid) allows remote attackers to insert arbitrary script via the PHPSESSID parameter.
Family:unixClass:vulnerability
Status:ACCEPTEDReference(s):CVE-2003-0442
Platform(s):Red Hat Linux 9
Product(s):php
Definition Synopsis
  • Red Hat 9 is installed
  • AND ix86 architecture
  • AND php version is less than 4.2.2-17.2
  • BACK