Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
wp-includes/functions.php in WordPress before 3.6.1 does not properly determine whether data has been serialized, which allows remote attackers to execute arbitrary code by triggering erroneous PHP unserialize operations.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
WordPress wp-includes/functions.php脚本远程任意代码执行漏洞
Vulnerability Description
WordPress是WordPress软件基金会的一套使用PHP语言开发的博客平台。该平台支持在PHP和MySQL的服务器上架设个人博客网站。 WordPress 3.6及之前的版本中的wp-includes/functions.php脚本中存在远程任意代码执行漏洞，该漏洞源于程序未确定数据是否已经序列化。远程攻击者可通过触发错误的PHP反序列化操作利用该漏洞执行任意代码。
CVSS Information
N/A
Vulnerability Type
N/A