Lucene search
K

5 matches found

Github Security Blog
Github Security Blog
added 2023/12/10 3:30 p.m.34 views

PHPEMS Deserialization of Untrusted Data vulnerability

A vulnerability classified as critical was found in PHPEMS 6.x/7.0. Affected by this vulnerability is an unknown functionality in the library lib/session.cls.php of the component Session Data Handler. The manipulation leads to deserialization. The attack can be launched remotely. The exploit has...

8.8CVSS7.2AI score0.02358EPSS
Exploits1References6Affected Software1
OSV
OSV
added 2023/12/10 3:30 p.m.19 views

GHSA-5RV2-VVMF-F7W8 PHPEMS Deserialization of Untrusted Data vulnerability

A vulnerability classified as critical was found in PHPEMS 6.x/7.0. Affected by this vulnerability is an unknown functionality in the library lib/session.cls.php of the component Session Data Handler. The manipulation leads to deserialization. The attack can be launched remotely. The exploit has...

6.3CVSS7.4AI score0.02358EPSS
Exploits1References6
NVD
NVD
added 2023/12/10 3:15 p.m.14 views

CVE-2023-6654

A vulnerability classified as critical was found in PHPEMS 6.x/7.x/8.x/9.0. Affected by this vulnerability is an unknown functionality in the library lib/session.cls.php of the component Session Data Handler. The manipulation leads to deserialization. The attack can be launched remotely. The...

8.8CVSS0.02358EPSS
Exploits1References3
Prion
Prion
added 2023/12/10 3:15 p.m.15 views

Deserialization of untrusted data

A vulnerability classified as critical was found in PHPEMS 6.x/7.x/8.x/9.0. Affected by this vulnerability is an unknown functionality in the library lib/session.cls.php of the component Session Data Handler. The manipulation leads to deserialization. The attack can be launched remotely. The...

6.5CVSS7.2AI score0.02358EPSS
Exploits1References3Affected Software1
Cvelist
Cvelist
added 2023/12/10 3:0 p.m.11 views

CVE-2023-6654 PHPEMS Session Data session.cls.php deserialization

A vulnerability classified as critical was found in PHPEMS 6.x/7.x/8.x/9.0. Affected by this vulnerability is an unknown functionality in the library lib/session.cls.php of the component Session Data Handler. The manipulation leads to deserialization. The attack can be launched remotely. The...

6.5CVSS9.1AI score0.02358EPSS
Exploits1References3
Rows per page
Query Builder