EDB-38123
functionalPHP Session Deserializer - Use-After-Free
view exploit source exploit_dbverifiedtype dosauthor Taoguang Chenpublished 2015-09-09catalog exploit_db
01
exploited CVEs (1)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2015-6835US | critical9.8 | Exploit | ||
The session deserializer in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13 mishandles multiple php_var_unserialize calls, which allow remote attackers to execute a… | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan