PHP before 5.2.12 does not properly handle session data, which has unspecified impact and attack vectors related to (1) interrupt corruption of the SESSION superglobal array and (2) the session.save_path directive.
References
Configurations
Configuration 1 (hide)
|
History
No history.
Information
Published : 2009-12-21 16:30
Updated : 2018-10-30 16:26
NVD link : CVE-2009-4143
Mitre link : CVE-2009-4143
CVE.ORG link : CVE-2009-4143
JSON object : View
Products Affected
php
- php
CWE