3 matches found
CVE-2015-2171
Middleware/SessionCookie.php in Slim before 2.6.0 allows remote attackers to conduct PHP object injection attacks and execute arbitrary PHP code via crafted session data...
7.5CVSS7.7AI score0.02497EPSS
SaveExploits0References4
CVE-2015-2171
CVE-2015-2171 affects the Slim PHP framework; vulnerable component is Middleware/SessionCookie.php in Slim before 2.6.0. The issue allows remote attackers to perform PHP object injection via crafted session data, enabling arbitrary code execution on the server. The root cause is deserialization o...
7.5CVSS7.8AI score0.02497EPSS
SaveExploits0References4Affected Software1
20