GHSA-q7qq-9gx2-ggxv

Source

https://github.com/advisories/GHSA-q7qq-9gx2-ggxv

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/12/GHSA-q7qq-9gx2-ggxv/GHSA-q7qq-9gx2-ggxv.json

Published

2022-12-02T22:26:45Z

Modified

2023-04-11T01:50:11.494687Z

Details

phpxmlrpc vulnerable to argument injection via local file access in Client:send via manipulation of $protocol argument.

References

• https://github.com/gggeek/phpxmlrpc/issues/81
• https://github.com/FriendsOfPHP/security-advisories/blob/master/phpxmlrpc/phpxmlrpc/2022-11-28-1.yaml
• https://github.com/gggeek/phpxmlrpc
• https://github.com/gggeek/phpxmlrpc/releases/tag/4.9.0