← Back

CVE-2004-0595

nvd nist
Published: Jul 27, 2004Modified: Apr 16, 2026

JSON object

Loading...
6.8
Vector
AV:N/AC:M/Au:N/C:P/I:P/A:P
Exploitability: 8.6 / Impact: 6.4
Source: NVD

Description

The strip_tags function in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, does not filter null (\0) characters within tag names when restricting input to allowed tags, which allows dangerous tags to be processed by web browsers such as Internet Explorer and Safari, which ignore null characters and facilitate the exploitation of cross-site scripting (XSS) vulnerabilities.

Affected (38)

Show all products
Avaya: Converged Communications Server, Integrated Management, S8300, S8500, S8700 · Redhat: Fedora Core · Trustix: Secure Linux · Php: Php
Avaya
5 products
Converged Communications Server
Integrated Management
S8300
S8500
S8700
Redhat
1 product
Fedora Core
Trustix
1 product
Secure Linux
Php
1 product
Php
Configuration A
6 vulnerable
Vulnerable SoftwareAffected Versions
Converged Communications Server
Version 2.0
Redhat
Fedora Core
Version core_1.0
Fedora Core
Version core_2.0
Trustix
Secure Linux
Version 1.5
Secure Linux
Version 2.0
Secure Linux
Version 2.1
Configuration B
32 vulnerable
Vulnerable SoftwareAffected Versions
Integrated Management
All versions
Avaya
S8300
Version r2.0.0
S8300
Version r2.0.1
Avaya
S8500
Version r2.0.0
S8500
Version r2.0.1
Avaya
S8700
Version r2.0.0
S8700
Version r2.0.1
Php
Php
Version 4.0.1
Php
Version 4.0.2
Php
Version 4.0.3
Php
Version 4.0.4
Php
Version 4.0.5
Php
Version 4.0.6
Php
Version 4.0.7
Php
Version 4.0
Php
Version 4.1.0
Php
Version 4.1.1
Php
Version 4.1.2
Php
Version 4.2.0
Php
Version 4.2.1
Php
Version 4.2.2
Php
Version 4.2.3
Php
Version 4.3.0
Php
Version 4.3.1
Php
Version 4.3.2
Php
Version 4.3.3
Php
Version 4.3.5
Php
Version 4.3.6
Php
Version 4.3.7
Php
Version 5.0 rc1
Php
Version 5.0 rc2
Php
Version 5.0 rc3

References (36)

Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
PatchVendor Advisory
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
ExploitPatchVendor Advisory
Source: cve@mitre.org
Source: cve@mitre.org
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitPatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.