PHPMemcachedAdmin 1.2.2 and earlier allows remote attackers to execute arbitrary PHP code via vectors related "serialized data and the last part of the concatenated filename," which creates a file in webroot.
References
Link | Resource |
---|---|
http://packetstormsecurity.com/files/129089/PHPMemcachedAdmin-1.2.2-Remote-Code-Execution.html | Third Party Advisory VDB Entry |
http://www.securityfocus.com/archive/1/533968/100/0/threaded | |
http://www.securityfocus.com/archive/1/533980/100/0/threaded | |
http://www.securityfocus.com/bid/71059 | Third Party Advisory VDB Entry |
https://exchange.xforce.ibmcloud.com/vulnerabilities/98638 |
Configurations
History
No history.
Information
Published : 2017-03-23 17:59
Updated : 2024-02-04 19:11
NVD link : CVE-2014-8731
Mitre link : CVE-2014-8731
CVE.ORG link : CVE-2014-8731
JSON object : View
Products Affected
phpmemcachedadmin_project
- phpmemcachedadmin
CWE
CWE-502
Deserialization of Untrusted Data