Description
PHPIDS before 20070703 does not properly handle setting the .text property of a SCRIPT element before its attachment to the DOM, which allows remote attackers to inject arbitrary web script.
Unscored
CVE-2007-3579
EUVD-2007-3563GHSA-x3hm-wxfj-93jm
PHPIDS before 20070703 does not properly handle setting the .text property of a SCRIPT element before its attachment to the DOM, which allo…
Published Jul 5, 2007 · Updated Aug 7, 2024 · Assigned by mitre