Lucene search
K

5 matches found

OSV
OSV
added 2023/12/10 3:30 p.m.19 views

GHSA-5RV2-VVMF-F7W8 PHPEMS Deserialization of Untrusted Data vulnerability

A vulnerability classified as critical was found in PHPEMS 6.x/7.0. Affected by this vulnerability is an unknown functionality in the library lib/session.cls.php of the component Session Data Handler. The manipulation leads to deserialization. The attack can be launched remotely. The exploit has...

6.3CVSS7.4AI score0.01666EPSS
Exploits1References6
Github Security Blog
Github Security Blog
added 2023/12/10 3:30 p.m.35 views

PHPEMS Deserialization of Untrusted Data vulnerability

A vulnerability classified as critical was found in PHPEMS 6.x/7.0. Affected by this vulnerability is an unknown functionality in the library lib/session.cls.php of the component Session Data Handler. The manipulation leads to deserialization. The attack can be launched remotely. The exploit has...

8.8CVSS7.2AI score0.01666EPSS
Exploits1References6Affected Software1
NVD
NVD
added 2023/12/10 3:15 p.m.17 views

CVE-2023-6654

A vulnerability classified as critical was found in PHPEMS 6.x/7.x/8.x/9.0. Affected by this vulnerability is an unknown functionality in the library lib/session.cls.php of the component Session Data Handler. The manipulation leads to deserialization. The attack can be launched remotely. The...

8.8CVSS0.01666EPSS
Exploits1References3
Prion
Prion
added 2023/12/10 3:15 p.m.17 views

Deserialization of untrusted data

A vulnerability classified as critical was found in PHPEMS 6.x/7.x/8.x/9.0. Affected by this vulnerability is an unknown functionality in the library lib/session.cls.php of the component Session Data Handler. The manipulation leads to deserialization. The attack can be launched remotely. The...

6.5CVSS7.2AI score0.01666EPSS
Exploits1References3Affected Software1
Cvelist
Cvelist
added 2023/12/10 3:0 p.m.17 views

CVE-2023-6654 PHPEMS Session Data session.cls.php deserialization

A vulnerability classified as critical was found in PHPEMS 6.x/7.x/8.x/9.0. Affected by this vulnerability is an unknown functionality in the library lib/session.cls.php of the component Session Data Handler. The manipulation leads to deserialization. The attack can be launched remotely. The...

6.5CVSS9.1AI score0.01666EPSS
Exploits1References3
Rows per page
Query Builder