Lucene search

K
securityvulnsPHP-SECURITYSECURITYVULNS:VULN:7473
HistoryMar 25, 2007 - 12:00 a.m.

PHP variables unset use after free vulnerability

2007-03-2500:00:00
PHP-SECURITY
vulners.com
61

There is no access counters for _SESSION and HTTP_SESSION_VARS variables, making it possible to trigger use-after-free conditions by unsetting these variables. In addition, it's possible to deserealize these variables.

CPENameOperatorVersion
phpeq5.2
phpeq4.4