Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The session extension in PHP 4 before 4.4.5, and PHP 5 before 5.2.1, calculates the reference count for the session variables without considering the internal pointer from the session globals, which allows context-dependent attackers to execute arbitrary code via a crafted string in the session_register after unsetting HTTP_SESSION_VARS and _SESSION, which destroys the session data Hashtable.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
PHP哈希表覆盖任意代码执行漏洞
Vulnerability Description
PHP是广泛使用的通用目的脚本语言，特别适合于Web开发，可嵌入到HTML中。 PHP在处理内部结构时存在漏洞，本地攻击者可能利用此漏洞在机器上执行任意指令。 由于没有包含会话全局变量中的内部指针，PHP的会话扩展没有为会话变量设置正确的引用计数值，因此尽管会话扩展仍有指向哈希表的内部指针并内部使用该指针，但unsetting _SESSION和HTTP_SESSION_VARS仍会破坏包含有会话数据的哈希表，允许攻击者通过特制的字符串替换哈希表，导致代码指令。
CVSS Information
N/A
Vulnerability Type
N/A