• Spitfire CMS 1.0.475 PHP Object Injection

    From Security Bot@2:250/1 to All on Sat Mar 4 20:22:00 2023


    Spitfire CMS 1.0.475 PHP Object Injection

    Spitfire CMS version 1.0.475 is prone to a PHP object injection
    vulnerability due to the unsafe use of unserialize() function. A potential attacker, authenticated, could exploit this vulnerability by sending
    specially crafted requests to the web application containing malicious serialized input.

    https://packetstormsecurity.com/files/170186/ZSL-2022-5720.txt

    Sat, 10 Dec 2022 02:29:19 GMT
    ________________________________
    --- The information is for inforamtional purposes only.
    * Origin: Read us with http://winpoint.org JID: rs@captflint.com