CVE-2013-1397

Symfony 2.0.x before 2.0.22, 2.1.x before 2.1.7, and 2.2.x remote attackers to execute arbitrary PHP code via a serialized PHP object to the 1 Yaml::parse or 2 Yaml\Parser::parse function, a different vulnerability than CVE-2013-1348...

Design/Logic Flaw

Symfony 2.0.x before 2.0.22, 2.1.x before 2.1.7, and 2.2.x remote attackers to execute arbitrary PHP code via a serialized PHP object to the 1 Yaml::parse or 2 Yaml\Parser::parse function, a different vulnerability than CVE-2013-1348...

PT-2014-2471

Name of the Vulnerable Software and Affected Versions Symfony versions 2.0.x through 2.0.21 Symfony versions 2.1.x through 2.1.6 Description The issue allows remote attackers to execute arbitrary PHP code via a serialized PHP object to the 1 Yaml::parse or 2 YamlParser::parse function...

PT-2014-3249

Name of the Vulnerable Software and Affected Versions LiveZilla versions prior to 5.1.2.1 Description The issue allows remote attackers to execute arbitrary PHP code via a serialized PHP object in a cookie, specifically through the setCookieValue function in lib/functions.global.inc.php...

CVE-2013-7034: Improper Control of Generation of Code

The setCookieValue function in lib/functions.global.inc.php in LiveZilla before 5.1.2.1 allows remote attackers to execute arbitrary PHP code via a serialized PHP object in a cookie...