Логотип exploitDog
bind:"BDU:2022-02517" OR bind:"CVE-2015-8935"
Консоль
Логотип exploitDog

exploitDog

bind:"BDU:2022-02517" OR bind:"CVE-2015-8935"

Количество 10

Количество 10

fstec логотип

BDU:2022-02517

почти 9 лет назад

Уязвимость функции sapi_header_op интерпретатора языка программирования PHP, позволяющая нарушителю провести XSS-атаки

CVSS3: 6.1
EPSS: Низкий
ubuntu логотип

CVE-2015-8935

почти 9 лет назад

The sapi_header_op function in main/SAPI.c in PHP before 5.4.38, 5.5.x before 5.5.22, and 5.6.x before 5.6.6 supports deprecated line folding without considering browser compatibility, which allows remote attackers to conduct cross-site scripting (XSS) attacks against Internet Explorer by leveraging (1) %0A%20 or (2) %0D%0A%20 mishandling in the header function.

CVSS3: 6.1
EPSS: Низкий
redhat логотип

CVE-2015-8935

больше 10 лет назад

The sapi_header_op function in main/SAPI.c in PHP before 5.4.38, 5.5.x before 5.5.22, and 5.6.x before 5.6.6 supports deprecated line folding without considering browser compatibility, which allows remote attackers to conduct cross-site scripting (XSS) attacks against Internet Explorer by leveraging (1) %0A%20 or (2) %0D%0A%20 mishandling in the header function.

CVSS3: 3.1
EPSS: Низкий
nvd логотип

CVE-2015-8935

почти 9 лет назад

The sapi_header_op function in main/SAPI.c in PHP before 5.4.38, 5.5.x before 5.5.22, and 5.6.x before 5.6.6 supports deprecated line folding without considering browser compatibility, which allows remote attackers to conduct cross-site scripting (XSS) attacks against Internet Explorer by leveraging (1) %0A%20 or (2) %0D%0A%20 mishandling in the header function.

CVSS3: 6.1
EPSS: Низкий
debian логотип

CVE-2015-8935

почти 9 лет назад

The sapi_header_op function in main/SAPI.c in PHP before 5.4.38, 5.5.x ...

CVSS3: 6.1
EPSS: Низкий
github логотип

GHSA-xghf-rfpw-9v3h

около 3 лет назад

The sapi_header_op function in main/SAPI.c in PHP before 5.4.38, 5.5.x before 5.5.22, and 5.6.x before 5.6.6 supports deprecated line folding without considering browser compatibility, which allows remote attackers to conduct cross-site scripting (XSS) attacks against Internet Explorer by leveraging (1) %0A%20 or (2) %0D%0A%20 mishandling in the header function.

CVSS3: 6.1
EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2016:2013-1

почти 9 лет назад

Security update for php53

EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2016:1922-1

почти 9 лет назад

Security update for php5

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2016:1842-1

почти 9 лет назад

Security update for php5

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2016:2080-1

почти 9 лет назад

Security update for php5

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
fstec логотип
BDU:2022-02517

Уязвимость функции sapi_header_op интерпретатора языка программирования PHP, позволяющая нарушителю провести XSS-атаки

CVSS3: 6.1
1%
Низкий
почти 9 лет назад
ubuntu логотип
CVE-2015-8935

The sapi_header_op function in main/SAPI.c in PHP before 5.4.38, 5.5.x before 5.5.22, and 5.6.x before 5.6.6 supports deprecated line folding without considering browser compatibility, which allows remote attackers to conduct cross-site scripting (XSS) attacks against Internet Explorer by leveraging (1) %0A%20 or (2) %0D%0A%20 mishandling in the header function.

CVSS3: 6.1
1%
Низкий
почти 9 лет назад
redhat логотип
CVE-2015-8935

The sapi_header_op function in main/SAPI.c in PHP before 5.4.38, 5.5.x before 5.5.22, and 5.6.x before 5.6.6 supports deprecated line folding without considering browser compatibility, which allows remote attackers to conduct cross-site scripting (XSS) attacks against Internet Explorer by leveraging (1) %0A%20 or (2) %0D%0A%20 mishandling in the header function.

CVSS3: 3.1
1%
Низкий
больше 10 лет назад
nvd логотип
CVE-2015-8935

The sapi_header_op function in main/SAPI.c in PHP before 5.4.38, 5.5.x before 5.5.22, and 5.6.x before 5.6.6 supports deprecated line folding without considering browser compatibility, which allows remote attackers to conduct cross-site scripting (XSS) attacks against Internet Explorer by leveraging (1) %0A%20 or (2) %0D%0A%20 mishandling in the header function.

CVSS3: 6.1
1%
Низкий
почти 9 лет назад
debian логотип
CVE-2015-8935

The sapi_header_op function in main/SAPI.c in PHP before 5.4.38, 5.5.x ...

CVSS3: 6.1
1%
Низкий
почти 9 лет назад
github логотип
GHSA-xghf-rfpw-9v3h

The sapi_header_op function in main/SAPI.c in PHP before 5.4.38, 5.5.x before 5.5.22, and 5.6.x before 5.6.6 supports deprecated line folding without considering browser compatibility, which allows remote attackers to conduct cross-site scripting (XSS) attacks against Internet Explorer by leveraging (1) %0A%20 or (2) %0D%0A%20 mishandling in the header function.

CVSS3: 6.1
1%
Низкий
около 3 лет назад
suse-cvrf логотип
SUSE-SU-2016:2013-1

Security update for php53

почти 9 лет назад
suse-cvrf логотип
openSUSE-SU-2016:1922-1

Security update for php5

почти 9 лет назад
suse-cvrf логотип
SUSE-SU-2016:1842-1

Security update for php5

почти 9 лет назад
suse-cvrf логотип
SUSE-SU-2016:2080-1

Security update for php5

почти 9 лет назад

Уязвимостей на страницу