PT-2014-4258

Name of the Vulnerable Software and Affected Versions Dotclear versions prior to 2.6.2 Description The issue allows remote attackers to execute arbitrary PHP code via a serialized object in the dc passwd cookie to a password-protected page. This is due to improper handling by certain PHP files,...