Moole Vulnerability Database

Find real vulnerabilities before they ship

Critical

CVE-2015-5243

phpWhois allows remote attackers to execute arbitrary code via a crafted whois record.

VectorNETWORK

PublishedAug 20, 2018, 21:29

Published Bysecalert@redhat.com

Base Score

Score9.8

Package (Ecosystem)IntroducedFixedLimit

jsmitty12/phpwhois(Packagist)05.1.0N/A

phpwhois/phpwhois(Packagist)0N/AN/A

brightlocal/phpwhois(Packagist)0N/AN/A

david-garcia/phpwhois(Packagist)0N/AN/A

ivankristianto/phpwhois(Packagist)0N/AN/A

kazist/phpwhois(Packagist)0N/AN/A

serluck/phpwhois(Packagist)0N/AN/A

simple-updates/phpwhois(Packagist)0N/AN/A

truckersmp/phpwhois(Packagist)0N/AN/A

CWE-94

Base Score

9.8

Vector String

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Base SeverityCritical

Version

3.0

Attack Vector (AV)

NETWORK