CVE

Id
65297  
CVE No.
CVE-2013-5350  
Status
Candidate  
Description
The "Remember me" feature in the opSecurityUser::getRememberLoginCookie function in lib/user/opSecurityUser.class.php in OpenPNE 3.6.13 before 3.6.13.1 and 3.8.9 before 3.8.9.1 does not properly validate login data in HTTP Cookie headers, which allows remote attackers to conduct PHP object injection attacks, and execute arbitrary PHP code, via a crafted serialized object.  
Phase
Assigned (20130821)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
638411 65297 CVE-2013-5350 MISC:http://secunia.com/secunia_research/2014-1/  View
638412 65297 CVE-2013-5350 CONFIRM:https://www.openpne.jp/archives/12293/  View
638413 65297 CVE-2013-5350 JVN:JVN#69986880  View
638414 65297 CVE-2013-5350 URL:http://jvn.jp/en/jp/JVN69986880/index.html  View
638415 65297 CVE-2013-5350 JVNDB:JVNDB-2014-000009  View
638416 65297 CVE-2013-5350 URL:http://jvndb.jvn.jp/jvndb/JVNDB-2014-000009  View
638417 65297 CVE-2013-5350 SECUNIA:54043  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
23867 JVNDB-2013-005442 Sharetronix におけるクロスサイトリクエストフォージェリの脆弱性 Sharetronix には、クロスサイトリクエストフォージェリの脆弱性が存在します。 CVE-2013-5355 65297 6.8 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-005442.html  View