Remote Code Execution

spoon/library is vulnerable to remote code execution. Lack of validation of the cookie allows a remote attacker to submit a cookie containing malicious executable objects that will execute upon deserialization in the wakeup magic method in spoon/cookie/cookie.php...

PT-2014-2376

Name of the Vulnerable Software and Affected Versions Spoon module version 0.24 Description The issue arises from improper use of the Storable::thaw function in the Spoon::Cookie component of the Spoon module for Perl. This allows remote attackers to execute arbitrary code by sending a crafted...