Skip to content
OpenAdvisories

Vendor

Xdebug

1 known vulnerabilities.

Products

Xdebug 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.3
    CVE-2015-10141 Public exploit

    Xdebug Remote Debugger Unauthenticated OS Command Execution

    An unauthenticated OS command injection vulnerability exists within Xdebug versions 2.5.5 and earlier, a PHP debugging extension developed by Derick Rethans. When remote debugging is enabled, Xdebug listens on port 9000 and accepts debugger protocol commands …

    Xdebug Xdebug xdebug xdebug Debian Ubuntu