Логотип exploitDog
bind:"GHSA-phvf-v525-xwq3" OR bind:"CVE-2018-10547"
Консоль
Логотип exploitDog

exploitDog

bind:"GHSA-phvf-v525-xwq3" OR bind:"CVE-2018-10547"

Количество 12

Количество 12

github логотип

GHSA-phvf-v525-xwq3

около 3 лет назад

An issue was discovered in ext/phar/phar_object.c in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1.x before 7.1.17, and 7.2.x before 7.2.5. There is Reflected XSS on the PHAR 403 and 404 error pages via request data of a request for a .phar file. NOTE: this vulnerability exists because of an incomplete fix for CVE-2018-5712.

CVSS3: 6.1
EPSS: Средний
ubuntu логотип

CVE-2018-10547

около 7 лет назад

An issue was discovered in ext/phar/phar_object.c in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1.x before 7.1.17, and 7.2.x before 7.2.5. There is Reflected XSS on the PHAR 403 and 404 error pages via request data of a request for a .phar file. NOTE: this vulnerability exists because of an incomplete fix for CVE-2018-5712.

CVSS3: 6.1
EPSS: Средний
redhat логотип

CVE-2018-10547

около 7 лет назад

An issue was discovered in ext/phar/phar_object.c in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1.x before 7.1.17, and 7.2.x before 7.2.5. There is Reflected XSS on the PHAR 403 and 404 error pages via request data of a request for a .phar file. NOTE: this vulnerability exists because of an incomplete fix for CVE-2018-5712.

CVSS3: 6.1
EPSS: Средний
nvd логотип

CVE-2018-10547

около 7 лет назад

An issue was discovered in ext/phar/phar_object.c in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1.x before 7.1.17, and 7.2.x before 7.2.5. There is Reflected XSS on the PHAR 403 and 404 error pages via request data of a request for a .phar file. NOTE: this vulnerability exists because of an incomplete fix for CVE-2018-5712.

CVSS3: 6.1
EPSS: Средний
debian логотип

CVE-2018-10547

около 7 лет назад

An issue was discovered in ext/phar/phar_object.c in PHP before 5.6.36 ...

CVSS3: 6.1
EPSS: Средний
fstec логотип

BDU:2019-04235

около 7 лет назад

Уязвимость компонента ext/phar/phar_object.c интерпретатора языка программирования PHP, позволяющая нарушителю осуществлять межсайтовые сценарные атаки (XSS)

CVSS3: 6.1
EPSS: Средний
suse-cvrf логотип

openSUSE-SU-2018:1317-1

около 7 лет назад

Security update for php5

EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2018:1207-1

около 7 лет назад

Security update for php7

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2018:1294-1

около 7 лет назад

Security update for php53

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2018:1291-1

около 7 лет назад

Security update for php5

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2018:1176-1

около 7 лет назад

Security update for php7

EPSS: Низкий
oracle-oval логотип

ELSA-2020-1112

около 5 лет назад

ELSA-2020-1112: php security update (MODERATE)

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
github логотип
GHSA-phvf-v525-xwq3

An issue was discovered in ext/phar/phar_object.c in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1.x before 7.1.17, and 7.2.x before 7.2.5. There is Reflected XSS on the PHAR 403 and 404 error pages via request data of a request for a .phar file. NOTE: this vulnerability exists because of an incomplete fix for CVE-2018-5712.

CVSS3: 6.1
33%
Средний
около 3 лет назад
ubuntu логотип
CVE-2018-10547

An issue was discovered in ext/phar/phar_object.c in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1.x before 7.1.17, and 7.2.x before 7.2.5. There is Reflected XSS on the PHAR 403 and 404 error pages via request data of a request for a .phar file. NOTE: this vulnerability exists because of an incomplete fix for CVE-2018-5712.

CVSS3: 6.1
33%
Средний
около 7 лет назад
redhat логотип
CVE-2018-10547

An issue was discovered in ext/phar/phar_object.c in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1.x before 7.1.17, and 7.2.x before 7.2.5. There is Reflected XSS on the PHAR 403 and 404 error pages via request data of a request for a .phar file. NOTE: this vulnerability exists because of an incomplete fix for CVE-2018-5712.

CVSS3: 6.1
33%
Средний
около 7 лет назад
nvd логотип
CVE-2018-10547

An issue was discovered in ext/phar/phar_object.c in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1.x before 7.1.17, and 7.2.x before 7.2.5. There is Reflected XSS on the PHAR 403 and 404 error pages via request data of a request for a .phar file. NOTE: this vulnerability exists because of an incomplete fix for CVE-2018-5712.

CVSS3: 6.1
33%
Средний
около 7 лет назад
debian логотип
CVE-2018-10547

An issue was discovered in ext/phar/phar_object.c in PHP before 5.6.36 ...

CVSS3: 6.1
33%
Средний
около 7 лет назад
fstec логотип
BDU:2019-04235

Уязвимость компонента ext/phar/phar_object.c интерпретатора языка программирования PHP, позволяющая нарушителю осуществлять межсайтовые сценарные атаки (XSS)

CVSS3: 6.1
33%
Средний
около 7 лет назад
suse-cvrf логотип
openSUSE-SU-2018:1317-1

Security update for php5

около 7 лет назад
suse-cvrf логотип
openSUSE-SU-2018:1207-1

Security update for php7

около 7 лет назад
suse-cvrf логотип
SUSE-SU-2018:1294-1

Security update for php53

около 7 лет назад
suse-cvrf логотип
SUSE-SU-2018:1291-1

Security update for php5

около 7 лет назад
suse-cvrf логотип
SUSE-SU-2018:1176-1

Security update for php7

около 7 лет назад
oracle-oval логотип
ELSA-2020-1112

ELSA-2020-1112: php security update (MODERATE)

около 5 лет назад

Уязвимостей на страницу