CVE-2013-4338

wp-includes/functions.php in WordPress before 3.6.1 does not properly determine whether data has been serialized, which allows remote attackers to execute arbitrary code by triggering erroneous PHP unserialize operations...

UBUNTU-CVE-2013-4338

wp-includes/functions.php in WordPress before 3.6.1 does not properly determine whether data has been serialized, which allows remote attackers to execute arbitrary code by triggering erroneous PHP unserialize operations...

CVE-2013-4338

wp-includes/functions.php in WordPress before 3.6.1 does not properly determine whether data has been serialized, which allows remote attackers to execute arbitrary code by triggering erroneous PHP unserialize operations...

CVE-2013-4338

wp-includes/functions.php in WordPress before 3.6.1 does not properly determine whether data has been serialized, which allows remote attackers to execute arbitrary code by triggering erroneous PHP unserialize operations...

PT-2013-4960

Name of the Vulnerable Software and Affected Versions WordPress versions prior to 3.6.1 Description The issue arises from improper determination of serialized data in wp-includes/functions.php, allowing remote attackers to execute arbitrary code by triggering erroneous PHP unserialize operations...

CVE-2013-4338: Improper Control of Generation of Code

wp-includes/functions.php in WordPress before 3.6.1 does not properly determine whether data has been serialized, which allows remote attackers to execute arbitrary code by triggering erroneous PHP unserialize operations...

CVE-2013-5303

Unspecified vulnerability in the Store Locator locator extension before 3.1.5 for TYPO3 has unknown impact and remote attack vectors, related to "Insecure Unserialize."...

Sql injection

Unspecified vulnerability in the Store Locator locator extension before 3.1.5 for TYPO3 has unknown impact and remote attack vectors, related to "Insecure Unserialize."...

CVE-2013-5303

Unspecified vulnerability in the Store Locator locator extension before 3.1.5 for TYPO3 has unknown impact and remote attack vectors, related to "Insecure Unserialize."...

CVE-2013-5303

CVE-2013-5303 corresponds to a vulnerability in the TYPO3 Store Locator extension (locator) prior to 3.1.5. The connected CSB documents indicate multiple issues for this extension during that period, including Insecure Unserialize and, in some listings, SQL Injection and Cross‑Site Scripting affe...

PT-2013-5463

Name of the Vulnerable Software and Affected Versions TYPO3 Store Locator locator extension versions prior to 3.1.5 Description The issue is related to "Insecure Unserialize" and has unknown impact and remote attack vectors. Recommendations For versions prior to 3.1.5, update to version 3.1.5 or...

CVE-2013-5303: Undefined Security Weakness

Unspecified vulnerability in the Store Locator locator extension before 3.1.5 for TYPO3 has unknown impact and remote attack vectors, related to "Insecure Unserialize."...

[RIPS] A static source code analyser for vulnerabilities in PHP scripts

RIPS is a tool written in PHP to find vulnerabilities in PHP applications using static code analysis. By tokenizing and parsing all source code files RIPS is able to transform PHP source code into a program model and to detect sensitive sinks potentially vulnerable functions that can be tainted b...

Movable Type 5.2.X < 5.2.6 Unspecified Vulnerability

According to its version number, the Movable Type install hosted on the remote web server is affected by an unspecified flaw when the 'commentstate' function is processed by the 'unserialize' function. This flaw is due to an issue with the Perl 'Storable::thaw' function, which is considered unsaf...

GLPI 0.83.9 Code Execution

======================================= Advisory title: unserialize vulnerability in GLPI 0.83.9 Product: GLPI 0.83.9 Discovered by: Xavier Mehrenberger Cassidian CyberSecurity Vulnerable version: 0.83.9 Tested: v0.83.9, 2013-06-21 Fixed in repository: 2013-06-23 commits 21169 to 21180 Category:...

Horde Framework Unserialize PHP Code Execution

This module exploits a php unserialize vulnerability in Horde use exploit/unix/webapp/horde/unserializeexec msf undefinedunserializeexec show actions ...actions... msf undefinedunserializeexec set ACTION msf undefinedunserializeexec show options ...show and set options... msf...

Design/Logic Flaw

plugins/system/remember/remember.php in Joomla! 2.5.x before 2.5.10 and 3.0.x before 3.0.4 does not properly handle an object obtained by unserializing a cookie, which allows remote authenticated users to conduct PHP object injection attacks and cause a denial of service via unspecified vectors...

Joomla! 3.0.3 PHP Object Injection Vulnerability

Joomla! versions 3.0.3 and below suffer from a PHP object injection vulnerability in remember.php. ------------------------------------------------------------------ Joomla! decrypt$str; 45. $cookieData = @unserialize$str; User input passed through cookies is not properly sanitized before being...

Joomla! 3.0.3 PHP Object Injection

------------------------------------------------------------------ Joomla! decrypt$str; 45. $cookieData = @unserialize$str; User input passed through cookies is not properly sanitized before being used in an unserialize call at line 45. This could be exploited to inject arbitrary PHP objects into...

Joomla! 3.0.3 - remember.php PHP Object Injection

Joomla! 3.0.3 - remember.php PHP Object Injection ------------------------------------------------------------------ Joomla! decrypt$str; 45. $cookieData = @unserialize$str; User input passed through cookies is not properly sanitized before being used in an unserialize call at line 45. This could...