Design/Logic Flaw

2023-01-1017:15:00

PRIOn knowledge base

www.prio-n.com

php object injection

spitfire cms

authenticated attackers

arbitrary code

crafted requests

web application

8.9 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

36.7%

JSON

A PHP Object Injection vulnerability in the unserialize() function Spitfire CMS v1.0.475 allows authenticated attackers to execute arbitrary code via sending crafted requests to the web application.

CPENameOperatorVersion
spitfireeq1.0475

CPE	Name	Operator	Version
	spitfire	eq	1.0475

References

www.zeroscience.mk/en/vulnerabilities/ZSL-2022-5720.php