Unrated severityNVD Advisory· Published Jan 13, 2006· Updated Jun 16, 2026
CVE-2006-0208
CVE-2006-0208
Description
Multiple cross-site scripting (XSS) vulnerabilities in PHP 4.4.1 and 5.1.1, when display_errors and html_errors are on, allow remote attackers to inject arbitrary web script or HTML via inputs to PHP applications that are not filtered when they are included in the resulting error message.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
50cpe:2.3:a:php:php:4.0.0:*:*:*:*:*:*:*+ 49 more
- cpe:2.3:a:php:php:4.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:php:php:4.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:php:php:4.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:php:php:4.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:php:php:4.0.4:*:*:*:*:*:*:*
- cpe:2.3:a:php:php:4.0.5:*:*:*:*:*:*:*
- cpe:2.3:a:php:php:4.0.6:*:*:*:*:*:*:*
- cpe:2.3:a:php:php:4.0:beta1:*:*:*:*:*:*
- cpe:2.3:a:php:php:4.0:beta2:*:*:*:*:*:*
- cpe:2.3:a:php:php:4.0:beta3:*:*:*:*:*:*
- cpe:2.3:a:php:php:4.0:beta4:*:*:*:*:*:*
- cpe:2.3:a:php:php:4.0:beta_4_patch1:*:*:*:*:*:*
- cpe:2.3:a:php:php:4.0:rc1:*:*:*:*:*:*
- cpe:2.3:a:php:php:4.0:rc2:*:*:*:*:*:*
- cpe:2.3:a:php:php:4.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:php:php:4.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:php:php:4.1.2:*:*:*:*:*:*:*
- cpe:2.3:a:php:php:4.2.0:*:*:*:*:*:*:*
- cpe:2.3:a:php:php:4.2.1:*:*:*:*:*:*:*
- cpe:2.3:a:php:php:4.2.2:*:*:*:*:*:*:*
- cpe:2.3:a:php:php:4.2.3:*:*:*:*:*:*:*
- cpe:2.3:a:php:php:4.3.0:*:*:*:*:*:*:*
- cpe:2.3:a:php:php:4.3.1:*:*:*:*:*:*:*
- cpe:2.3:a:php:php:4.3.10:*:*:*:*:*:*:*
- cpe:2.3:a:php:php:4.3.11:*:*:*:*:*:*:*
- cpe:2.3:a:php:php:4.3.2:*:*:*:*:*:*:*
- cpe:2.3:a:php:php:4.3.3:*:*:*:*:*:*:*
- cpe:2.3:a:php:php:4.3.4:*:*:*:*:*:*:*
- cpe:2.3:a:php:php:4.3.5:*:*:*:*:*:*:*
- cpe:2.3:a:php:php:4.3.6:*:*:*:*:*:*:*
- cpe:2.3:a:php:php:4.3.7:*:*:*:*:*:*:*
- cpe:2.3:a:php:php:4.3.8:*:*:*:*:*:*:*
- cpe:2.3:a:php:php:4.3.9:*:*:*:*:*:*:*
- cpe:2.3:a:php:php:4.4.1:*:*:*:*:*:*:*
- cpe:2.3:a:php:php:4.4.2:*:*:*:*:*:*:*
- cpe:2.3:a:php:php:5.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:php:php:5.0.0:beta1:*:*:*:*:*:*
- cpe:2.3:a:php:php:5.0.0:beta2:*:*:*:*:*:*
- cpe:2.3:a:php:php:5.0.0:beta3:*:*:*:*:*:*
- cpe:2.3:a:php:php:5.0.0:rc1:*:*:*:*:*:*
- cpe:2.3:a:php:php:5.0.0:rc2:*:*:*:*:*:*
- cpe:2.3:a:php:php:5.0.0:rc3:*:*:*:*:*:*
- cpe:2.3:a:php:php:5.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:php:php:5.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:php:php:5.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:php:php:5.0.4:*:*:*:*:*:*:*
- cpe:2.3:a:php:php:5.0.5:*:*:*:*:*:*:*
- cpe:2.3:a:php:php:5.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:php:php:5.1.1:*:*:*:*:*:*:*
- (no CPE)range: <=4.4.1,<=5.1.1
Patches
Vulnerability mechanics
References
29- secunia.com/advisories/18431nvdPatchVendor Advisory
- secunia.com/advisories/18697nvdPatchVendor Advisory
- secunia.com/advisories/19179nvdPatchVendor Advisory
- secunia.com/advisories/19355nvdPatchVendor Advisory
- www.gentoo.org/security/en/glsa/glsa-200603-22.xmlnvdPatchVendor Advisory
- www.php.net/release_5_1_2.phpnvdPatch
- www.securityfocus.com/bid/16803nvdPatch
- rhn.redhat.com/errata/RHSA-2006-0549.htmlnvdVendor Advisory
- secunia.com/advisories/19012nvdVendor Advisory
- secunia.com/advisories/19832nvdVendor Advisory
- secunia.com/advisories/20210nvdVendor Advisory
- secunia.com/advisories/20222nvdVendor Advisory
- secunia.com/advisories/20951nvdVendor Advisory
- secunia.com/advisories/21252nvdVendor Advisory
- secunia.com/advisories/21564nvdVendor Advisory
- www.redhat.com/support/errata/RHSA-2006-0501.htmlnvdVendor Advisory
- www.vupen.com/english/advisories/2006/0177nvdVendor Advisory
- www.vupen.com/english/advisories/2006/0369nvdVendor Advisory
- www.vupen.com/english/advisories/2006/2685nvdVendor Advisory
- patches.sgi.com/support/free/security/advisories/20060501-01-U.ascnvd
- lists.suse.de/archive/suse-security-announce/2006-Feb/0008.htmlnvd
- rhn.redhat.com/errata/RHSA-2006-0276.htmlnvd
- support.avaya.com/elmodocs2/security/ASA-2006-129.htmnvd
- support.avaya.com/elmodocs2/security/ASA-2006-160.htmnvd
- www.mandriva.com/security/advisoriesnvd
- www.php.net/ChangeLog-4.phpnvd
- bugzilla.redhat.com/bugzilla/show_bug.cginvd
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10064nvd
- usn.ubuntu.com/261-1/nvd
News mentions
0No linked articles in our index yet.