PHP 5.4.45 is Outdated and Full of Preformance Interupting Arbitrary Code Execution Bugs

Disclosed: 2017-08-21 13:29:40 By sondash128 To gratipay
Unknown
Vulnerability Details
Your PHP version is affected by quite a few remote arbitrary code execution, remote file renaming, and remote file rewriting bugs that require no authentication and can cause big problems, from performance interruptions and messing with server files to DoS attacks. These are not related to any particular non-default module, but php itself. Here's a little list I compiled: CVE-2015-2301 CVE-2014-9652 CVE-2014-5459 CVE-2014-4698 CVE-2014-4670 CVE-2014-3981
Actions
View on HackerOne
Report Stats
  • Report ID: 131452
  • State: Closed
  • Substate: not-applicable
  • Upvotes: 1
Share this report