Lucene search
MitreCVELIST:CVE-2016-7125HistorySep 12, 2016 - 1:00 a.m.
CVE-2016-7125
2016-09-1201:00:00
mitre
www.cve.org
1
ext/session/session.c in PHP before 5.6.25 and 7.x before 7.0.10 skips invalid session names in a way that triggers incorrect parsing, which allows remote attackers to inject arbitrary-type session data by leveraging control of a session name, as demonstrated by object injection.
References
openwall.com/lists/oss-security/2016/09/02/9
rhn.redhat.com/errata/RHSA-2016-2750.html
www.php.net/ChangeLog-5.php
www.php.net/ChangeLog-7.php
www.securityfocus.com/bid/92552
www.securitytracker.com/id/1036680
bugs.php.net/bug.php?id=72681
github.com/php/php-src/commit/8763c6090d627d8bb0ee1d030c30e58f406be9ce?w=1
security.gentoo.org/glsa/201611-22
www.tenable.com/security/tns-2016-19
Related
f5
f5
SOL35232053 - PHP vulnerability CVE-2016-7125
2016-11-15 00:00:00
K35232053 : PHP vulnerability CVE-2016-7125
2016-11-15 00:00:00
ubuntucve
ubuntucve
CVE-2016-7125
2016-09-11 00:00:00
nvd
nvd
CVE-2016-7125
2016-09-12 01:59:03
nessus
nessus
F5 Networks BIG-IP : PHP vulnerability (K35232053)
2017-03-02 00:00:00
PHP 5.6.x < 5.6.25 Multiple Vulnerabilities
2016-08-23 00:00:00
Tenable SecurityCenter PHP < 5.6.25 Multiple Vulnerabilities (TNS-2016-09)
2017-06-26 00:00:00
debiancve
debiancve
CVE-2016-7125
2016-09-12 01:59:00
redhatcve
redhatcve
CVE-2016-7125
2016-09-09 13:18:41
prion
prion
Design/Logic Flaw
2016-09-12 01:59:00
cve
cve
CVE-2016-7125
2016-09-12 01:59:03
ibm
ibm
openvas
openvas
PHP Multiple Vulnerabilities - 02 (Sep 2016) - Linux
2016-09-12 00:00:00
PHP Multiple Vulnerabilities - 02 (Sep 2016) - Windows
2016-09-12 00:00:00
openSUSE: Security Advisory for php5 (openSUSE-SU-2016:2337-1)
2016-09-20 00:00:00
suse
suse
Security update for php5 (important)
2016-09-19 19:09:23
Security update for php53 (important)
2016-10-05 18:12:21
Security update for php53 (important)
2016-09-16 21:09:09
slackware
slackware
[slackware-security] php
2016-09-08 22:38:27
cloudfoundry
cloudfoundry
USN-3095-1 PHP vulnerabilities | Cloud Foundry
2016-10-04 00:00:00
debian
debian
[SECURITY] [DSA 3689-1] php5 security update
2016-10-08 13:53:04
[SECURITY] [DSA 3689-1] php5 security update
2016-10-08 13:53:04
ubuntu
ubuntu
PHP vulnerabilities
2016-10-04 00:00:00
osv
osv
php5 - security update
2016-09-18 00:00:00
gentoo
gentoo
PHP: Multiple vulnerabilities
2016-11-30 00:00:00
veracode
veracode
Arbitrary Code Execution
2019-05-02 06:02:18
Denial Of Service (DoS) Through Memory Corruption
2019-05-02 06:02:24
Arbitrary Code Execution
2019-05-02 06:02:23
redhat
redhat
rosalinux
rosalinux
Advisory ROSA-SA-2021-1950
2021-07-02 17:57:45