Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2011-3379

Опубликовано: 03 нояб. 2011
Источник: nvd
CVSS2: 7.5
EPSS Низкий

Описание

The is_a function in PHP 5.3.7 and 5.3.8 triggers a call to the __autoload function, which makes it easier for remote attackers to execute arbitrary code by providing a crafted URL and leveraging potentially unsafe behavior in certain PEAR packages and custom autoloaders.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:php:php:5.3.7:*:*:*:*:*:*:*
cpe:2.3:a:php:php:5.3.8:*:*:*:*:*:*:*

EPSS

Процентиль: 79%
0.01354
Низкий

7.5 High

CVSS2

Дефекты

CWE-94

Связанные уязвимости

ubuntu
почти 14 лет назад

The is_a function in PHP 5.3.7 and 5.3.8 triggers a call to the __autoload function, which makes it easier for remote attackers to execute arbitrary code by providing a crafted URL and leveraging potentially unsafe behavior in certain PEAR packages and custom autoloaders.

redhat
почти 14 лет назад

The is_a function in PHP 5.3.7 and 5.3.8 triggers a call to the __autoload function, which makes it easier for remote attackers to execute arbitrary code by providing a crafted URL and leveraging potentially unsafe behavior in certain PEAR packages and custom autoloaders.

debian
почти 14 лет назад

The is_a function in PHP 5.3.7 and 5.3.8 triggers a call to the __auto ...

github
около 3 лет назад

The is_a function in PHP 5.3.7 and 5.3.8 triggers a call to the __autoload function, which makes it easier for remote attackers to execute arbitrary code by providing a crafted URL and leveraging potentially unsafe behavior in certain PEAR packages and custom autoloaders.

EPSS

Процентиль: 79%
0.01354
Низкий

7.5 High

CVSS2

Дефекты

CWE-94