CVE-2014-8731 PHPMemcachedAdmin 1.2.2 and earlier allows remote attackers to execute arbitrary PHP code via vectors related "serialized data and the last part of the concatenated filename," which creates a file in....
CriticalCVSS 9.8
EPSS 11.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
PHPMemcachedAdmin 1.2.2 and earlier allows remote attackers to execute arbitrary PHP code via vectors related "serialized data and the last part of the concatenated filename," which creates a file in webroot.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| phpmemcachedadmin project phpmemcachedadmin | <= 1.2.2 | No fix listed |
References
- packetstormsecurity.com third-party-advisory vdb-entry
- 20141112 CVE-2014-8731 - RCE in phpMemcachedAdmin <=1.2.2 mailing-list
- 20141113 Re: CVE-2014-8731 - RCE in phpMemcachedAdmin <=1.2.2 mailing-list
- 71059 third-party-advisory vdb-entry
- phpmemcachedadmin-cve20148731-code-exec(98638) vdb-entry