Skip to content
OpenAdvisories

Archive

2 June 2014

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • High —

    Symfony Arbitrary PHP code Execution

    Symfony 2.0.x before 2.0.22, 2.1.x before 2.1.7, and 2.2.x remote attackers to execute arbitrary PHP code via a serialized PHP object to the (1) Yaml::parse or (2) Yaml\Parser::parse function, a different vulnerability than CVE-2013-1348.

  • High —

    Symphony Vulnerable to PHP Code Injection via YAML Parsing

    The Yaml::parse function in Symfony 2.0.x before 2.0.22 remote attackers to execute arbitrary PHP code via a PHP file, a different vulnerability than CVE-2013-1397.