PHP Object Injection Vulnerability in Anchor CMS by Anchor
CVE-2015-5687

Currently unrated

Key Information:

Vendor

Anchorcms

Status
Anchor Cms
Vendor
CVE Published:
5 October 2015

What is CVE-2015-5687?

A vulnerability exists in Anchor CMS version 0.9.x that allows remote attackers to exploit PHP object injection, enabling them to execute arbitrary PHP code through crafted serialized objects placed in cookies. This manipulation can lead to serious consequences, compromising the integrity of the application and data security.

References

https://github.com/anchorcms/anchor-cms/pull/904
x_refsource_CONFIRM
http://seclists.org/fulldisclosure/2015/Aug/76
mailing-listx_refsource_FULLDISC
http://seclists.org/fulldisclosure/2015/Aug/83
mailing-listx_refsource_FULLDISC

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.