PHP Permissions, Privileges, and Access Controls Vulnerability (CVE-2010-3065)

Description

The default session serializer in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 does not properly handle the PS_UNDEF_MARKER marker, which allows context-dependent attackers to modify arbitrary session variables via a crafted session variable name.

Remediation

References

CVE-2010-3065

Related Vulnerabilities

Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-23922)

WordPress Plugin Quiz and Survey Master (QSM)-Easy Quiz and Survey Maker Multiple Vulnerabilities (7.3.6)

WordPress Plugin Aspose PDF Exporter Arbitrary File Download (1.0)

Joomla! Core 1.5.x Cross-Site Scripting (1.5.0 - 1.5.10)

ReviveAdserver Permissions, Privileges, and Access Controls Vulnerability (CVE-2015-7371)

Severity

Medium

Classification

CVE-2010-3065 CWE-264