Skip to content
OpenAdvisories

Package · Debian

xdebug

1 known vulnerabilities.

1 result · Feed

  • Critical 9.3
    CVE-2015-10141 Public exploit

    Xdebug Remote Debugger Unauthenticated OS Command Execution

    An unauthenticated OS command injection vulnerability exists within Xdebug versions 2.5.5 and earlier, a PHP debugging extension developed by Derick Rethans. When remote debugging is enabled, Xdebug listens on port 9000 and accepts debugger protocol commands …