Description
The php_register_variable_ex function in php_variables.c in PHP 5.3.9 allows remote attackers to execute arbitrary code via a request containing a large number of variables, related to improper handling of array variables. NOTE: this vulnerability exists because of an incorrect fix for CVE-2011-4885.
Remediation
References
Related Vulnerabilities
Internet Information Services Other Vulnerability (CVE-2001-0151)
Caddy Web Server Improper Authentication Vulnerability (CVE-2018-21246)
WordPress Plugin Wholesale Market Arbitrary File Download (2.2.0)
MySQL CVE-2016-0648 Vulnerability (CVE-2016-0648)
TYPO3 Improper Input Validation Vulnerability (CVE-2010-5099)