PHP mysql_error() crosssite scripting
Published:		21.09.2006
Source:		BUGTRAQ
SecurityVulns ID:		6639
Type:		library
Level:		4/10
Description:		Crossite scripting is possible if mysql_error() result is used in application output.

Affected:		PHP : PHP 4.4
		PHP : PHP 5.1

Original document

gmdarkfig_(at)_gmail.com, mysql_error() can lead to Cross Site Scripting attacks (21.09.2006)

Discuss:

Read or add your comments to this news (0 comments)