mirror of
https://github.com/0xMarcio/cve.git
synced 2026-10-27 16:51:03 +00:00
0xMarcio
42e055b60b
The first full pass over all 60,039 reference URLs: 1,566 answer 404 or 410, which removes 2,663 links from 2,419 entries and 2,445 lines from references.txt. Anything that timed out, refused a HEAD or answered 403 kept its link. The weekly job takes it from here on a five-week cycle, so this only had to be paid once.
852 B
852 B
CVE-2004-0595
Description
The strip_tags function in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, does not filter null (\0) characters within tag names when restricting input to allowed tags, which allows dangerous tags to be processed by web browsers such as Internet Explorer and Safari, which ignore null characters and facilitate the exploitation of cross-site scripting (XSS) vulnerabilities.
POC
Reference
Github
No PoCs found on GitHub currently.