Test ID:	1.3.6.1.4.1.25623.1.0.108138
Category:	Web application abuses
Title:	PHP Server Side Request Forgery Security Bypass Vulnerability - Linux
Summary:	PHP is prone to a security bypass vulnerability.
Description:	Summary: PHP is prone to a security bypass vulnerability. Vulnerability Insight: The flaw exists due to the php_wddx_pop_element function in ext/wddx/wddx.c via an inapplicable class name in a wddxPacket XML document, leading to mishandling in a wddx_deserialize call. Vulnerability Impact: An attacker can exploit this issue to bypass security restrictions and perform unauthorized actions. This may aid in further attacks. Affected Software/OS: PHP versions 7.0.x before 7.0.18 and 7.1.x before 7.1.4. Solution: Update to PHP version 7.0.18, 7.1.4 or later. CVSS Score: 5.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2017-7272 BugTraq ID: 97178 http://www.securityfocus.com/bid/97178 https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20170403-0_PHP_Misbehavior_of_fsockopen_function_v10.txt http://www.securitytracker.com/id/1038158
Copyright	Copyright (C) 2017 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.