Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 07:14:03 +0000 certa-2007-avi-144 — Plusieurs vulnérabilités découvertes dans PHP (PHP : Hypertext Processor) permettent à un utilisateur distant malintent… https://cve.radiocsirt.org/vuln/certa-2007-avi-144 certa-2007-avi-144 https://cve.radiocsirt.org/vuln/certa-2007-avi-144 EUVD-2026-133411 https://cve.radiocsirt.org/vuln/euvd-2026-133411 EUVD-2026-133411 https://cve.radiocsirt.org/vuln/euvd-2026-133411 fkie_cve-2007-1454 https://cve.radiocsirt.org/vuln/fkie_cve-2007-1454 <p>ext/filter in PHP 5.2.0, when FILTER_SANITIZE_STRING is used with the FILTER_FLAG_STRIP_LOW flag, does not properly strip HTML tags, which allows remote attackers to conduct cross-site scripting (XSS) attacks via HTML with a &#39;&lt;&#39; character followed by certain whitespace characters, which passes one filter but is collapsed into a valid tag, as demonstrated using %0b.</p> <p>ext/filter in PHP 5.2.0, when FILTER_SANITIZE_STRING is used with the FILTER_FLAG_STRIP_LOW flag, does not properly strip HTML tags, which allows remote attackers to conduct cross-site scripting (XSS) attacks via HTML with a &#39;&lt;&#39; character followed by certain whitespace characters, which passes one filter but is collapsed into a valid tag, as demonstrated using %0b.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2007-1454 GHSA-7f5c-3r3h-wfv7 https://cve.radiocsirt.org/vuln/ghsa-7f5c-3r3h-wfv7 <p>ext/filter in PHP 5.2.0, when FILTER_SANITIZE_STRING is used with the FILTER_FLAG_STRIP_LOW flag, does not properly strip HTML tags, which allows remote attackers to conduct cross-site scripting (XSS) attacks via HTML with a &#39;&lt;&#39; character followed by certain whitespace characters, which passes one filter but is collapsed into a valid tag, as demonstrated using %0b.</p> <p>ext/filter in PHP 5.2.0, when FILTER_SANITIZE_STRING is used with the FILTER_FLAG_STRIP_LOW flag, does not properly strip HTML tags, which allows remote attackers to conduct cross-site scripting (XSS) attacks via HTML with a &#39;&lt;&#39; character followed by certain whitespace characters, which passes one filter but is collapsed into a valid tag, as demonstrated using %0b.</p> https://cve.radiocsirt.org/vuln/ghsa-7f5c-3r3h-wfv7 gsd-2007-1454 https://cve.radiocsirt.org/vuln/gsd-2007-1454 gsd-2007-1454 https://cve.radiocsirt.org/vuln/gsd-2007-1454