Search for packages
| purl | pkg:alpm/archlinux/php@7.0.10-1 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
| This package is not known to be affected by vulnerabilities. | ||
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-hcqt-5qmr-aaaj | ext/session/session.c in PHP before 5.6.25 and 7.x before 7.0.10 skips invalid session names in a way that triggers incorrect parsing, which allows remote attackers to inject arbitrary-type session data by leveraging control of a session name, as demonstrated by object injection. |
CVE-2016-7125
|
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2025-03-28T07:46:15.802076+00:00 | Arch Linux Importer | Fixing | VCID-hcqt-5qmr-aaaj | https://security.archlinux.org/AVG-152 | 36.0.0 |
| 2024-09-18T02:01:26.841002+00:00 | Arch Linux Importer | Fixing | VCID-hcqt-5qmr-aaaj | https://security.archlinux.org/AVG-152 | 34.0.1 |
| 2024-01-03T22:27:36.582501+00:00 | Arch Linux Importer | Fixing | VCID-hcqt-5qmr-aaaj | https://security.archlinux.org/AVG-152 | 34.0.0rc1 |