CVE-2023-6654

PHPEMS vulnerable in Library: deserialization flaw in lib/session.cls.php of Session Data Handler across PHPEMS 6.x–9.0. Deserialization manipulation allows remote abuse; exploit disclosed publicly (VDB-247357). Several sources corroborate: CVE-2023-6654 entry notes remote attack and public explo...

CVE-2023-6654

A vulnerability classified as critical was found in PHPEMS 6.x/7.x/8.x/9.0. Affected by this vulnerability is an unknown functionality in the library lib/session.cls.php of the component Session Data Handler. The manipulation leads to deserialization. The attack can be launched remotely. The...

CVE-2023-6654: Deserialization of Untrusted Data

A vulnerability classified as critical was found in PHPEMS 6.x/7.x/8.x/9.0. Affected by this vulnerability is an unknown functionality in the library lib/session.cls.php of the component Session Data Handler. The manipulation leads to deserialization. The attack can be launched remotely. The...