Описание
PHPMemcachedAdmin 1.2.2 and earlier allows remote attackers to execute arbitrary PHP code via vectors related "serialized data and the last part of the concatenated filename," which creates a file in webroot.
PHPMemcachedAdmin 1.2.2 and earlier allows remote attackers to execute arbitrary PHP code via vectors related "serialized data and the last part of the concatenated filename," which creates a file in webroot.
Ссылки
- https://nvd.nist.gov/vuln/detail/CVE-2014-8731
- https://exchange.xforce.ibmcloud.com/vulnerabilities/98638
- http://packetstormsecurity.com/files/129089/PHPMemcachedAdmin-1.2.2-Remote-Code-Execution.html
- http://www.securityfocus.com/archive/1/533968/100/0/threaded
- http://www.securityfocus.com/archive/1/533980/100/0/threaded
- http://www.securityfocus.com/bid/71059
Связанные уязвимости
PHPMemcachedAdmin 1.2.2 and earlier allows remote attackers to execute arbitrary PHP code via vectors related "serialized data and the last part of the concatenated filename," which creates a file in webroot.
PHPMemcachedAdmin 1.2.2 and earlier allows remote attackers to execute ...
Уязвимость веб-интерфейса PHPMemcachedAdmin, существующая из-за ошибок механизма восстановления сериализованных данных, позволяющая нарушителю повысить свои привилегии и выполнить произвольный PHP-код