Test ID:	1.3.6.1.4.1.25623.1.0.807088
Category:	Web application abuses
Title:	PHP Multiple Vulnerabilities - 01 (Mar 2016) - Windows
Summary:	PHP is prone to multiple vulnerabilities.
Description:	Summary: PHP is prone to multiple vulnerabilities. Vulnerability Insight: Multiple flaws are due to: - The multiple use-after-free vulnerabilities in SPL unserialize implementation. - An insufficient validation of user supplied input by 'phar/phar_object.c' script. Vulnerability Impact: Successfully exploiting this issue allow remote attackers to execute arbitrary code and to create or overwrite arbitrary files on the system and this may lead to launch further attacks. Affected Software/OS: PHP versions before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before 5.6.12 on Windows Solution: Update to PHP version 5.4.44 or 5.5.28 or 5.6.12 or later. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2015-6831 BugTraq ID: 76737 http://www.securityfocus.com/bid/76737 Debian Security Information: DSA-3344 (Google Search) http://www.debian.org/security/2015/dsa-3344 https://security.gentoo.org/glsa/201606-10 http://www.openwall.com/lists/oss-security/2015/08/19/3 Common Vulnerability Exposure (CVE) ID: CVE-2015-6832 Common Vulnerability Exposure (CVE) ID: CVE-2015-6833
Copyright	Copyright (C) 2016 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.