CVE-2005-3388
4.3
CVSS v2.0 Base Score
63.29%
MEDIUM RiskEPSS (98th percentile)
NVD-CWE-Other
Cross-site scripting (XSS) vulnerability in the phpinfo function in PHP 4.x up to 4.4.0 and 5.x up to 5.0.5 allows remote attackers to inject arbitrary web script or HTML via a crafted URL with a "stacked array assignment."
Published: 11/1/2005
Modified: 4/16/2026
Vulnerability Summary
CVSS v2 Score
4.3
AV:N/AC:M/Au:N/C:N/I:P/A:N
EPSS Score (Exploitation Probability)
63.29%MEDIUM Exploitation Risk
98th percentile
This vulnerability has a 63.29% probability of being exploited in the next 30 days, ranking higher than 98% of all scored CVEs.
CWE Classification
NVD-CWE-Other