CVE-2002-1954

None

CVSS

—

EPSS

11.9%

Published

Dec 31, 2002

CISA due date

—

The record

Cross-site scripting (XSS) vulnerability in the phpinfo function in PHP 4.2.3 allows remote attackers to inject arbitrary web script or HTML via the query string argument, as demonstrated using soinfo.php.

Affected packages

Ecosystem	Package	Introduced	Fixed