Vulnerabilities > CVE-2015-6527 - Unspecified vulnerability in PHP 7.0.0

047910
CVSS 7.3 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
LOW
Integrity impact
LOW
Availability impact
LOW
network
low complexity
php
NVD
Published: 2016-01-19
Updated: 2024-11-21

Summary

The php_str_replace_in_subject function in ext/standard/string.c in PHP 7.x before 7.0.0 allows remote attackers to execute arbitrary code via a crafted value in the third argument to the str_ireplace function.

Vulnerable Configurations

Part Description Count
Application
Php
14

References