Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2016-3171

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-69g8-g9jq-74v7

Drupal arbitrary code execution Drupal 6.x before 6.38, when used with PHP before 5.4.45, 5.5.x before 5.5.29, or 5.6.x before 5.6.13, might allow remote attackers to execute arbitrary code via vectors related to session data truncation.

gitlab/packagist/drupal/core/CVE-2016-3171

Session data truncation can lead to unserialization of user provided data Drupal might allow remote attackers to execute arbitrary code via vectors related to session data truncation.

gitlab/packagist/drupal/drupal/CVE-2016-3171

Session data truncation can lead to unserialization of user provided data Drupal might allow remote attackers to execute arbitrary code via vectors related to session data truncation.