Security Advisory

CVE-2010-3065

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2010-08-20 19:00:00

Last updated 2024-08-07 02:55:46

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

The default session serializer in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 does not properly handle the PS_UNDEF_MARKER marker, which allows context-dependent attackers to modify arbitrary session variables via a crafted session variable name.

← Browse all CVEs View on cve.org ↗