Exploitation Summary
EIP tracks 1 public exploit for CVE-2007-1380. PoCs published by Stefan Esser.
AI-analyzed exploit summary This exploit demonstrates a PHP session deserialization information leak vulnerability (CVE-2007-1380) by manipulating session data to dump heap memory contents. It uses the 'php_binary' serializer to trigger the leak.
Description
The php_binary serialization handler in the session extension in PHP before 4.4.5, and 5.x before 5.2.1, allows context-dependent attackers to obtain sensitive information (memory contents) via a serialized variable entry with a large length value, which triggers a buffer over-read.
Exploits (1)
This exploit demonstrates a PHP session deserialization information leak vulnerability (CVE-2007-1380) by manipulating session data to dump heap memory contents. It uses the 'php_binary' serializer to trigger the leak.