Unscored CVE-2015-5687 EUVD-2015-5637GHSA-fq89-qvg6-5qrj

system/session/drivers/cookie.php in Anchor CMS 0.9.x allows remote attackers to conduct PHP object injection attacks and execute arbitrary…

Published Oct 5, 2015 · Updated Aug 6, 2024 · Assigned by mitre

Description

system/session/drivers/cookie.php in Anchor CMS 0.9.x allows remote attackers to conduct PHP object injection attacks and execute arbitrary PHP code via a crafted serialized object in a cookie.

References

https://github.com/anchorcms/anchor-cms/pull/904
20150827 AnchorCMS - PHP Object Injection (CVE-2015-5687) and More mailing-list
20150829 Re: AnchorCMS - PHP Object Injection (CVE-2015-5687) and More mailing-list