HexBrain

Gratipay · Report #131452

PHP 5.4.45 is Outdated and Full of Preformance Interupting Arbitrary Code Execution Bugs

N/Astatus
1upvotes
21 Aug 2017disclosed

How it was found

Your PHP version is affected by quite a few remote arbitrary code execution, remote file renaming, and remote file rewriting bugs that require no authentication and can cause big problems, from performance interruptions and messing with server files to DoS attacks. These are not related to any particular non-default module, but php itself.

Here's a little list I compiled: CVE-2015-2301 CVE-2014-9652 CVE-2014-5459 CVE-2014-4698 CVE-2014-4670 CVE-2014-3981

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original