PT-2013-3409

Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.3.22 PHP versions 5.4.x prior to 5.4.12 Description The issue allows remote attackers to read arbitrary files via a SOAP WSDL file containing an XML external entity declaration in conjunction with an entity reference,...

PT-2013-1336

Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.3.23 PHP versions 5.4.x prior to 5.4.13 Description The issue is related to an XML External Entity XXE problem in the soap xmlParseFile and soap xmlParseMemory functions, allowing remote attackers to read arbitrary file...