PHP Session Data Deserialization Arbitrary Code Execution Vulnerability

  1. Network Vulnerabilities
  2. Web application abuses
  3. PHP Session Data Deserialization Arbitrary Code Execution Vulnerability
Summary
PHP is prone to an arbitrary-code-execution vulnerability. An attacker may exploit this issue to execute arbitrary code within the context of the affected webserver. This issue affects PHP 4 versions prior to 4.4.5 and PHP 5 versions prior to 5.2.1.
Solution
Please see the references for more information.
References
Updated on 2015-03-25
Severity
High Severity
Classification
Related Vulnerabilities