CVE-2015-6527

The phpstrreplaceinsubject function in ext/standard/string.c in PHP 7.x before 7.0.0 allows remote attackers to execute arbitrary code via a crafted value in the third argument to the strireplace function...

CVE-2015-6527

The CVE-2015-6527 issue affects PHP 7.x prior to 7.0.0 and is caused by the php_str_replace_in_subject function in ext/standard/string.c. A remote attacker can trigger arbitrary code execution by supplying a crafted value as the third argument to str_ireplace, with a network-exposed attack vector...