CVE-2003-0442
MEDIUM 4.3EPSS 7.0%
Cross-site scripting (XSS) vulnerability in the transparent SID support capability for PHP before 4.3.2 (session.use_trans_sid) allows remote attackers to insert arbitrary script via the PHPSESSID parameter.
- CVSS v2.0 NVD
- 4.3 MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N - EPSS
- 6.98% chance of exploitation in the next 30 days, 94th percentile
- Published
- 2003-06-20
- Updated
- 2024-08-08
ExploitDB entries (1)
Security advisories
- http://shh.thathost.com/secadv/2003-05-11-php.txt
- http://www.redhat.com/support/errata/RHSA-2003-204.html
- http://www.mandriva.com/security/advisories?name=MDKSA-2003:082
- http://www.securityfocus.com/bid/7761