PHPEMS Deserialization Vulnerability

2023-12-1300:00:00

China National Vulnerability Database

www.cnvd.org.cn

phpems

deserialization

vulnerability

code execution

online mock exam

AI Score

7.3

Confidence

High

EPSS

0.006

Percentile

78.6%

JSON

PHPEMS is a PHP online mock exam system. PHPEMS suffers from a deserialization vulnerability that stems from unsafe deserialization processing of lib/session.cls.php when receiving serialized data submitted by a user, which can be exploited by an attacker to cause code execution.