CVE-2011-4962

code/sitefeatures/PageCommentInterface.php in SilverStripe 2.4.x before 2.4.6 might allow remote attackers to execute arbitrary code via a crafted cookie in a user comment submission, which is not properly handled when it is deserialized...

CVE-2011-4962

code/sitefeatures/PageCommentInterface.php in SilverStripe 2.4.x before 2.4.6 might allow remote attackers to execute arbitrary code via a crafted cookie in a user comment submission, which is not properly handled when it is deserialized...

CVE-2011-4962

SilverStripe CMS (2.4.x) before 2.4.6 is affected by CVE-2011-4962: an attacker can trigger remote code execution by crafting a cookie in a user comment submission, due to improper handling during deserialization of PageCommentInterface.php data. The root cause is deserializing untrusted cookie d...