| शीर्षक | viames Pair Framework <=1.9.11 PHP Object Injection |
|---|
| विवरण | Pair Framework has a PHP Object Injection vulnerability as a result of Deserialization of Untrusted Data.
(POP/) Gadget Chains exist in Pair Framework (and its libraries) which allow Object Injection vulnerabilities to be exploited, for example to write arbitrary files. Other attacks may be possible depending on what additional code is used in a given project.
Exploitation of the vulnerability does not require authentication and can be achieved by a single GET request. |
|---|
| स्रोत | ⚠️ https://gist.github.com/mcdruid/1997e10026833d2d1f3e359d75b5912a |
|---|
| उपयोगकर्ता | mcdruid (UID 79710) |
|---|
| सबमिशन | 06/03/2025 10:03 PM (2 साल पहले) |
|---|
| संयम | 16/03/2025 02:25 PM (10 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 299875 [viames Pair Framework तक 1.9.11 PHP Object /src/UserRemember.php getCookieContent cookieName अधिकार वृद्धि] |
|---|
| अंक | 20 |
|---|