Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
PHP Vulnerability - CVE-2014-3515 - Vulnerability Database
PHP

PHP Vulnerability - CVE-2014-3515

High
Reference: CVE-2014-3515
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2014-3515
Title: PHP Vulnerability
Overview:

The SPL component in PHP before 5.4.30 and 5.5.x before 5.5.14 incorrectly anticipates that certain data structures will have the array data type after unserialization which allows remote attackers to execute arbitrary code via a crafted string that triggers use of a Hashtable destructor related to quottype confusionquot issues in (1) ArrayObject and (2) SPLObjectStorage.