Lucene search
+L

5 matches found

Github Security Blog
Github Security Blog
•added 2023/12/10 3:30 p.m.•51 views

PHPEMS Deserialization of Untrusted Data vulnerability

A vulnerability classified as critical was found in PHPEMS 6.x/7.0. Affected by this vulnerability is an unknown functionality in the library lib/session.cls.php of the component Session Data Handler. The manipulation leads to deserialization. The attack can be launched remotely. The exploit has...

8.8CVSS7.2AI score0.01666EPSS
SaveExploits1References6Affected Software1
OSV
OSV
•added 2023/12/10 3:30 p.m.•69 views

GHSA-5RV2-VVMF-F7W8 PHPEMS Deserialization of Untrusted Data vulnerability

A vulnerability classified as critical was found in PHPEMS 6.x/7.0. Affected by this vulnerability is an unknown functionality in the library lib/session.cls.php of the component Session Data Handler. The manipulation leads to deserialization. The attack can be launched remotely. The exploit has...

6.3CVSS7.4AI score0.01666EPSS
SaveExploits1References6
NVD
NVD
•added 2023/12/10 3:15 p.m.•41 views

CVE-2023-6654

A vulnerability classified as critical was found in PHPEMS 6.x/7.x/8.x/9.0. Affected by this vulnerability is an unknown functionality in the library lib/session.cls.php of the component Session Data Handler. The manipulation leads to deserialization. The attack can be launched remotely. The...

8.8CVSS0.01666EPSS
SaveExploits1References3
Prion
Prion
•added 2023/12/10 3:15 p.m.•25 views

Deserialization of untrusted data

A vulnerability classified as critical was found in PHPEMS 6.x/7.x/8.x/9.0. Affected by this vulnerability is an unknown functionality in the library lib/session.cls.php of the component Session Data Handler. The manipulation leads to deserialization. The attack can be launched remotely. The...

6.5CVSS7.2AI score0.01666EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2023/12/10 3:00 p.m.•55 views

CVE-2023-6654 PHPEMS Session Data session.cls.php deserialization

A vulnerability classified as critical was found in PHPEMS 6.x/7.x/8.x/9.0. Affected by this vulnerability is an unknown functionality in the library lib/session.cls.php of the component Session Data Handler. The manipulation leads to deserialization. The attack can be launched remotely. The...

6.5CVSS9.1AI score0.01666EPSS
SaveExploits1References3
Rows per page
Query Builder