5450 matches found
PT-2018-9494
Name of the Vulnerable Software and Affected Versions YesWiki versions = cercopitheque beta 1 Description The issue concerns a PHP Object Injection vulnerability. It occurs in the i18n.inc.php file when unserializing a user-entered parameter, potentially leading to code execution or information...
Design/Logic Flaw
The installer script in webEdition CMS before 6.2.7-s1 and 6.3.x before 6.3.8-s1 allows remote attackers to conduct PHP Object Injection attacks by intercepting a request to update.webedition.org...
CVE-2014-2302
The installer script in webEdition CMS before 6.2.7-s1 and 6.3.x before 6.3.8-s1 allows remote attackers to conduct PHP Object Injection attacks by intercepting a request to update.webedition.org...
CVE-2014-2302
The CVE-2014-2302 entry is substantiated by multiple connected documents: webEdition CMS installer/online installer vulnerability leading to remote command execution via PHP object injection when the installer communicates with update.webedition.org. Affected versions include webEdition CMS befor...
PT-2018-4198
Name of the Vulnerable Software and Affected Versions webEdition CMS versions prior to 6.2.7-s1 webEdition CMS versions 6.3.x prior to 6.3.8-s1 Description The issue allows remote attackers to conduct PHP Object Injection attacks by intercepting a request to the update.webedition.org endpoint. Th...
CVE-2014-2302: Improper Control of Generation of Code
The installer script in webEdition CMS before 6.2.7-s1 and 6.3.x before 6.3.8-s1 allows remote attackers to conduct PHP Object Injection attacks by intercepting a request to update.webedition.org...
SS-2018-017: Possible PHP Object Injection via Multi-Value Field Extension
More info at https://www.silverstripe.org/download/security-releases/ss-2018-017/...
CVE-2018-1000525
openpsa contains a PHP Object Injection vulnerability in Form data passed as GET request variables that can result in Possible information disclosure and remote code execution. This attack appear to be exploitable via Specially crafted GET request variable containing serialised PHP object. This...
CVE-2018-1000525
openpsa contains a PHP Object Injection vulnerability in Form data passed as GET request variables that can result in Possible information disclosure and remote code execution. This attack appear to be exploitable via Specially crafted GET request variable containing serialised PHP object. This...
CVE-2018-1000527
Froxlor version = 0.9.39.5 contains a PHP Object Injection vulnerability in Domain name form that can result in Possible information disclosure and remote code execution. This attack appear to be exploitable via Passing malicious PHP objection in $POST'sslipandport'. This vulnerability appears to...
Information disclosure
Froxlor version = 0.9.39.5 contains a PHP Object Injection vulnerability in Domain name form that can result in Possible information disclosure and remote code execution. This attack appear to be exploitable via Passing malicious PHP objection in $POST'sslipandport'. This vulnerability appears to...
CVE-2018-1000525
openpsa contains a PHP Object Injection vulnerability in Form data passed as GET request variables that can result in Possible information disclosure and remote code execution. This attack appear to be exploitable via Specially crafted GET request variable containing serialised PHP object. This...
CVE-2018-1000525
openpsa contains a PHP Object Injection vulnerability in Form data passed as GET request variables that can result in Possible information disclosure and remote code execution. This attack appear to be exploitable via Specially crafted GET request variable containing serialised PHP object. This...
CVE-2018-1000527
Froxlor version = 0.9.39.5 contains a PHP Object Injection vulnerability in Domain name form that can result in Possible information disclosure and remote code execution. This attack appear to be exploitable via Passing malicious PHP objection in $POST'sslipandport'. This vulnerability appears to...
CVE-2018-1000527
Froxlor version = 0.9.39.5 contains a PHP Object Injection vulnerability in Domain name form that can result in Possible information disclosure and remote code execution. This attack appear to be exploitable via Passing malicious PHP objection in $POST'sslipandport'. This vulnerability appears to...
CVE-2018-1000527: Deserialization of Untrusted Data
Froxlor version = 0.9.39.5 contains a PHP Object Injection vulnerability in Domain name form that can result in Possible information disclosure and remote code execution. This attack appear to be exploitable via Passing malicious PHP objection in $POST'sslipandport'. This vulnerability appears to...
CVE-2018-1000525: Deserialization of Untrusted Data
openpsa contains a PHP Object Injection vulnerability in Form data passed as GET request variables that can result in Possible information disclosure and remote code execution. This attack appear to be exploitable via Specially crafted GET request variable containing serialised PHP object. This...
PT-2018-9424
Name of the Vulnerable Software and Affected Versions Froxlor versions prior to 0.9.39.5 Description The issue concerns a PHP Object Injection vulnerability in the Domain name form, potentially leading to information disclosure and remote code execution. This can be exploited by passing malicious...
PT-2018-9422
Name of the Vulnerable Software and Affected Versions openpsa versions prior to the version containing commit 097eae0 Description The issue concerns a PHP Object Injection vulnerability. It occurs when form data passed as GET request variables is specially crafted to contain serialized PHP object...