• info
• discussion
• exploit
• solution
• references

PHP Multiple Unspecified Vulnerabilities

An exploit has been released for e107 that demonstrates the 'zend_hash_del_key_or_index()' function vulnerability.

Attackers may exploit some of these issues through a web client.

• /data/vulnerabilities/exploits/pmwiki2.1.19_zend_hash_rce_poc.txt
• /data/vulnerabilities/exploits/e107_globals_overwrite_zendhashdel_poc.txt