Description
Use-after-free vulnerability in the add_post_var function in the Posthandler component in PHP 5.6.x before 5.6.1 might allow remote attackers to execute arbitrary code by leveraging a third-party filter extension that accesses a certain ksep value.
Remediation
References
Related Vulnerabilities
Oracle Application Server CVE-2007-5516 Vulnerability (CVE-2007-5516)
Nginx CVE-2013-2070 Vulnerability (CVE-2013-2070)
WordPress Plugin Events Search For The Events Calendar Security Bypass (1.1.3)
WordPress Plugin WPFront Scroll Top Cross-Site Scripting (2.0.6.07225)
osTicket Integer Overflow or Wraparound Vulnerability (CVE-2018-7194)