Описание
code injection in phpxmlrpc/phpxmlrpc
code injection in Wrapper::buildClientWrapperCode via manipulation of the $client argument. It was possible to force the client to access local files or connect to undesired urls instead of the intended target server's url.
Пакеты
Наименование
phpxmlrpc/phpxmlrpc
composer
Затронутые версииВерсия исправления
< 4.9.0
4.9.0
Дефекты
CWE-95
Дефекты
CWE-95