PatchTheCVECVE-2004-0595: The strip_tags function in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, does not filter null (\0) characters w
CVE-2004-0595 is a medium-severity flaw (CVSS 6.8) affecting converged communications server, fedora core, secure linux. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
The strip_tags function in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, does not filter null (\0) characters within tag names when restricting input to allowed tags, which allows dangerous tags to be processed by web browsers such as Internet Explorer and Safari, which ignore null characters and facilitate the exploitation of cross-site scripting (XSS) vulnerabilities.
Why this priority
- EPSS top 1%: very likely to be exploited
- Public exploit reference
- On your watchlist
No fix is published yet: follow the downgrade or mitigation steps.
Risk facts
| CVSS score | 6.8 (Medium) |
| EPSS exploit chance | 45.2% (top 1%) |
| CISA exploited list | No |
| Published | 2004-07-27 |
| Last modified | 2026-06-16 |
Last updated 2026-06-16 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Public exploits and detection
Public code exists for this CVE. Treat unpatched systems as at risk, and only run PoCs in a lab.
- Exploit-DB: PHP 4.x/5.0 - 'Strip_Tags()' Function Bypass
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2004-0595?
converged communications server: mitigate or apply the listed mitigation; fedora core: mitigate or apply the listed mitigation; secure linux: mitigate or apply the listed mitigation. Exact commands for each OS are on this page.
Is CVE-2004-0595 being exploited?
CVE-2004-0595 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2004-0595 affect?
CVE-2004-0595 affects converged communications server, fedora core, secure linux. Severity is medium (CVSS 6.8). The strip_tags function in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, does not filter null (\0) characters within tag names when restricting input to allowed tags, which allows dangerous tags to be processed by web browsers such as Intern
How urgent is CVE-2004-0595?
Priority 58/100. EPSS top 1%: very likely to be exploited; Public exploit reference; On your watchlist
Software pages
PHP vulnerabilities · Safari vulnerabilities · Internet Explorer vulnerabilities · Apple Safari and WebKit vulnerabilities
Related CVEs
- CVE-2005-0003 LOW 2.1 MITIGATE MITIGATE The 64 bit ELF support in Linux kernel 2.6 before 2.6.10, on 64-bit architectures, does not properly check for
- CVE-2004-1235 MEDIUM 6.2 MITIGATE MITIGATE Race condition in the (1) load_elf_library and (2) binfmt_aout function calls for uselib in Linux kernel 2.4 t
- CVE-2004-0594 MEDIUM 5.1 DOWNGRADE MITIGATE The memory_limit functionality in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, under certain conditions such a
- CVE-2004-0554 LOW 2.1 MITIGATE MITIGATE Linux kernel 2.4.x and 2.6.x for x86 allows local users to cause a denial of service (system crash), possibly
- CVE-2004-0495 HIGH 7.2 MITIGATE MITIGATE Multiple unknown vulnerabilities in Linux kernel 2.4 and 2.6 allow local users to gain privileges or access ke