PHP mysql_error() crosssite scripting

2006-09-2100:00:00

BUGTRAQ

vulners.com

Crossite scripting is possible if mysql_error() result is used in application output.

CPENameOperatorVersion
phpeq5.1
phpeq4.4

CPE	Name	Operator	Version
	php	eq	5.1
	php	eq	4.4

References

vulners.com/securityvulns/securityvulns:doc:14369