EDB-37765
PoCZend Framework 2.4.2 - PHP FPM XML eXternal Entity Injection
view exploit source exploit_dbtype webappsauthor Dawid Golunskipublished 2015-08-13catalog exploit_db
01
exploited CVEs (1)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2015-5161US | medium6.8 | Exploit | ||
The Zend_Xml_Security::scan in ZendXml before 1.0.1 and Zend Framework before 1.12.14, 2.x before 2.4.6, and 2.5.x before 2.5.2, when running under PHP-FPM in a threaded environmen… | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan