UpHeron
All vulnerabilities

Servers and applications

CVE-2018-5712

An issue was discovered in PHP before 5.6.33, 7.0.x before 7.0.27, 7.1.x before 7.1.13, and 7.2.x before 7.2.1. There is Reflected XSS on the PHAR 404 error page via the URI of a request for a .phar file.

Severity
Medium 6.1
Published
16 Jan 2018
Last changed
17 Jun 2026
Added to UpHeron
14 Oct 2026
Sources
NVD

Affected software

SoftwareAffected versions
PHPServers and applications · cpe:a:php:php
  • Every version up to 5.6.32
  • From 7.0.0 up to 7.0.26
  • After 7.1.0 up to 7.1.12
  • Version 7.2.0

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2018-5712
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2018-5712