CodeIgniter And Kohana 'unserialize()' Function PHP Object Injection Vulnerability
BID:67338
Info
CodeIgniter And Kohana 'unserialize()' Function PHP Object Injection Vulnerability
| Bugtraq ID: | 67338 |
| Class: | Input Validation Error |
| CVE: |
CVE-2014-8684 |
| Remote: | Yes |
| Local: | No |
| Published: | May 12 2014 12:00AM |
| Updated: | Mar 19 2015 07:35AM |
| Credit: | Scott Arciszewski |
| Vulnerable: |
EllisLab CodeIgniter 2.1 EllisLab CodeIgniter 2.0.3 EllisLab CodeIgniter 1.7.2 EllisLab CodeIgniter 1.7.1 EllisLab CodeIgniter 1.5.2 |
| Not Vulnerable: | |
Discussion
CodeIgniter And Kohana 'unserialize()' Function PHP Object Injection Vulnerability
CodeIgniter and Kohana are prone to a remote PHP object-injection vulnerability.
Attackers can exploit this issue to inject arbitrary object in to the application. This may allow an attacker to execute arbitrary PHP code through specially crafted serialized objects.
Following products are vulnerable:
CodeIgniter 2.1.4 and prior.
Kohana 3.2.3 and 3.3.2.
CodeIgniter and Kohana are prone to a remote PHP object-injection vulnerability.
Attackers can exploit this issue to inject arbitrary object in to the application. This may allow an attacker to execute arbitrary PHP code through specially crafted serialized objects.
Following products are vulnerable:
CodeIgniter 2.1.4 and prior.
Kohana 3.2.3 and 3.3.2.
Exploit / POC
CodeIgniter And Kohana 'unserialize()' Function PHP Object Injection Vulnerability
An attacker can exploit this issue using a web browser.
An attacker can exploit this issue using a web browser.
Solution / Fix
CodeIgniter And Kohana 'unserialize()' Function PHP Object Injection Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
CodeIgniter And Kohana 'unserialize()' Function PHP Object Injection Vulnerability
References:
References: