| Max CVSS | 4.3 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2007-3577 | 4.3 |
PHPIDS before 20070703 does not properly handle use of the substr method in (1) document.location.search and (2) document.referrer; (3) certain use of document.location.hash; (4) certain "window[eval" and similar expressions; (5) certain Function exp
|
29-07-2017 - 01:32 | 05-07-2007 - 20:30 | |
| CVE-2007-3578 | 4.3 |
PHPIDS before 20070703 does not properly handle (1) arithmetic expressions and (2) unclosed comments, which allows remote attackers to inject arbitrary web script.
|
29-07-2017 - 01:32 | 05-07-2007 - 20:30 | |
| CVE-2007-3579 | 4.3 |
PHPIDS before 20070703 does not properly handle setting the .text property of a SCRIPT element before its attachment to the DOM, which allows remote attackers to inject arbitrary web script.
|
29-07-2017 - 01:32 | 05-07-2007 - 20:30 |