Every CVE Search/ Get API key

CVE-2004-0595

The strip_tags function in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, does not filter null (\0)...

6.8 MediumPublic exploit

The strip_tags function in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, does not filter null (\0) characters within tag names when restricting input to allowed tags, which allows dangerous tags to be processed by web browsers such as Internet Explorer and Safari, which ignore null characters and facilitate the exploitation of cross-site scripting (XSS) vulnerabilities.

Exploit likelihood

45.2%Up 4.4 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 6.8

The strip_tags function in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, does not filter null (\0) characters within tag names when restricting input to allowed tags, which allows dangerous tags to be processed by web browsers such as Internet Explorer and Safari, which ignore null characters and facilitate the exploitation of cross-site scripting (XSS) vulnerabilities.

Record
CVE-2004-0595
CVSS 2.0
6.8 MediumAV:N/AC:M/Au:N/C:P/I:P/A:P
Updated
2026-11-02
CVE List No score

The strip_tags function in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, does not filter null (\0) characters within tag names when restricting input to allowed tags, which allows dangerous tags to be processed by web browsers such as Internet Explorer and Safari, which ignore null characters and facilitate the exploitation of cross-site scripting (XSS) vulnerabilities.

Record
CVE-2004-0595
Updated
2026-11-02
EUVDEUVD-2004-0594 No score

The strip_tags function in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, does not filter null (\0) characters within tag names when restricting input to allowed tags, which allows dangerous tags to be processed by web browsers such as Internet Explorer and Safari, which ignore null characters and facilitate the exploitation of cross-site scripting (XSS) vulnerabilities.

Record
EUVD-2004-0594
Updated
2026-11-03
GitHub AdvisoriesGHSA-h8wj-59vf-r37g No score

The strip_tags function in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, does not filter null (\0)...

The strip_tags function in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, does not filter null (\0) characters within tag names when restricting input to allowed tags, which allows dangerous tags to be processed by web browsers such as Internet Explorer and Safari, which ignore null characters and facilitate the exploitation of cross-site scripting (XSS) vulnerabilities.

Record
GHSA-h8wj-59vf-r37g
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
php4
Debian:3.0
From an advisory covering 2 CVEs
 before 4.1.2-7
4.1.2-7
php3
Debian:3.0
From an advisory covering 2 CVEs
 before 3:3.0.18-23.1woody2, plus listed versions
3:3.0.18-23.1woody1
3:3.0.18-23.1woody2
php
Red Hat:enterprise_linux:3::as
From an advisory covering 2 CVEs
 before 0:4.3.2-11.1.ent
0:4.3.2-11.1.ent
php-debuginfo
Red Hat:enterprise_linux:3::as
From an advisory covering 2 CVEs
 before 0:4.3.2-11.1.ent
0:4.3.2-11.1.ent
php-devel
Red Hat:enterprise_linux:3::as
From an advisory covering 2 CVEs
 before 0:4.3.2-11.1.ent
0:4.3.2-11.1.ent
php-imap
Red Hat:enterprise_linux:3::as
From an advisory covering 2 CVEs
 before 0:4.3.2-11.1.ent
0:4.3.2-11.1.ent
php-ldap
Red Hat:enterprise_linux:3::as
From an advisory covering 2 CVEs
 before 0:4.3.2-11.1.ent
0:4.3.2-11.1.ent
php-mysql
Red Hat:enterprise_linux:3::as
From an advisory covering 2 CVEs
 before 0:4.3.2-11.1.ent
0:4.3.2-11.1.ent
php-odbc
Red Hat:enterprise_linux:3::as
From an advisory covering 2 CVEs
 before 0:4.3.2-11.1.ent
0:4.3.2-11.1.ent
php-pgsql
Red Hat:enterprise_linux:3::as
From an advisory covering 2 CVEs
 before 0:4.3.2-11.1.ent
0:4.3.2-11.1.ent
Show 24 moreShow less
Affected packages
PackageAffectedFixed
php
Red Hat:enterprise_linux:3::desktop
From an advisory covering 2 CVEs
 before 0:4.3.2-11.1.ent
0:4.3.2-11.1.ent
php-debuginfo
Red Hat:enterprise_linux:3::desktop
From an advisory covering 2 CVEs
 before 0:4.3.2-11.1.ent
0:4.3.2-11.1.ent
php-devel
Red Hat:enterprise_linux:3::desktop
From an advisory covering 2 CVEs
 before 0:4.3.2-11.1.ent
0:4.3.2-11.1.ent
php-imap
Red Hat:enterprise_linux:3::desktop
From an advisory covering 2 CVEs
 before 0:4.3.2-11.1.ent
0:4.3.2-11.1.ent
php-ldap
Red Hat:enterprise_linux:3::desktop
From an advisory covering 2 CVEs
 before 0:4.3.2-11.1.ent
0:4.3.2-11.1.ent
php-mysql
Red Hat:enterprise_linux:3::desktop
From an advisory covering 2 CVEs
 before 0:4.3.2-11.1.ent
0:4.3.2-11.1.ent
php-odbc
Red Hat:enterprise_linux:3::desktop
From an advisory covering 2 CVEs
 before 0:4.3.2-11.1.ent
0:4.3.2-11.1.ent
php-pgsql
Red Hat:enterprise_linux:3::desktop
From an advisory covering 2 CVEs
 before 0:4.3.2-11.1.ent
0:4.3.2-11.1.ent
php
Red Hat:enterprise_linux:3::es
From an advisory covering 2 CVEs
 before 0:4.3.2-11.1.ent
0:4.3.2-11.1.ent
php-debuginfo
Red Hat:enterprise_linux:3::es
From an advisory covering 2 CVEs
 before 0:4.3.2-11.1.ent
0:4.3.2-11.1.ent
php-devel
Red Hat:enterprise_linux:3::es
From an advisory covering 2 CVEs
 before 0:4.3.2-11.1.ent
0:4.3.2-11.1.ent
php-imap
Red Hat:enterprise_linux:3::es
From an advisory covering 2 CVEs
 before 0:4.3.2-11.1.ent
0:4.3.2-11.1.ent
php-ldap
Red Hat:enterprise_linux:3::es
From an advisory covering 2 CVEs
 before 0:4.3.2-11.1.ent
0:4.3.2-11.1.ent
php-mysql
Red Hat:enterprise_linux:3::es
From an advisory covering 2 CVEs
 before 0:4.3.2-11.1.ent
0:4.3.2-11.1.ent
php-odbc
Red Hat:enterprise_linux:3::es
From an advisory covering 2 CVEs
 before 0:4.3.2-11.1.ent
0:4.3.2-11.1.ent
php-pgsql
Red Hat:enterprise_linux:3::es
From an advisory covering 2 CVEs
 before 0:4.3.2-11.1.ent
0:4.3.2-11.1.ent
php
Red Hat:enterprise_linux:3::ws
From an advisory covering 2 CVEs
 before 0:4.3.2-11.1.ent
0:4.3.2-11.1.ent
php-debuginfo
Red Hat:enterprise_linux:3::ws
From an advisory covering 2 CVEs
 before 0:4.3.2-11.1.ent
0:4.3.2-11.1.ent
php-devel
Red Hat:enterprise_linux:3::ws
From an advisory covering 2 CVEs
 before 0:4.3.2-11.1.ent
0:4.3.2-11.1.ent
php-imap
Red Hat:enterprise_linux:3::ws
From an advisory covering 2 CVEs
 before 0:4.3.2-11.1.ent
0:4.3.2-11.1.ent
php-ldap
Red Hat:enterprise_linux:3::ws
From an advisory covering 2 CVEs
 before 0:4.3.2-11.1.ent
0:4.3.2-11.1.ent
php-mysql
Red Hat:enterprise_linux:3::ws
From an advisory covering 2 CVEs
 before 0:4.3.2-11.1.ent
0:4.3.2-11.1.ent
php-odbc
Red Hat:enterprise_linux:3::ws
From an advisory covering 2 CVEs
 before 0:4.3.2-11.1.ent
0:4.3.2-11.1.ent
php-pgsql
Red Hat:enterprise_linux:3::ws
From an advisory covering 2 CVEs
 before 0:4.3.2-11.1.ent
0:4.3.2-11.1.ent

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
Exploit-DBPHP 4.x/5.0 - 'Strip_Tags()' Function Bypass2004-07-14

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, Exploit-DB, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2004-0595 is a medium vulnerability (CVSS 6.8) in Php, published July 16, 2004. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 45.2%, the 98th percentile. No source names a fixed version.

References

Show 25 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open