CVE-2003-0442: XSS
Cross-site scripting (XSS) vulnerability in the transparent SID support capability for PHP before 4.3.2 (session.usetranssid) allows remote attackers to insert arbitrary script via the PHPSESSID parameter.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2003-0442?
CVE-2003-0442 is classified as a moderate severity level vulnerability due to its potential for cross-site scripting attacks.
How do I fix CVE-2003-0442?
To fix CVE-2003-0442, upgrade PHP to version 4.3.2 or later, or disable the transparent SID support by setting session.use_trans_sid to 0.
Which versions are affected by CVE-2003-0442?
CVE-2003-0442 affects PHP versions prior to 4.3.2 and Red Hat Linux versions 8.0 and 9.0.
What type of attack does CVE-2003-0442 allow?
CVE-2003-0442 allows remote attackers to execute arbitrary scripts via cross-site scripting (XSS) attacks using the PHPSESSID parameter.
Is CVE-2003-0442 exploitable on all configurations of PHP?
CVE-2003-0442 is exploitable only if the transparent SID support is enabled in PHP configurations.