CVE-2015-5161
Zend Framework < 1.12.14, 2.x < 2.4.6, 2.5.x < 2.5.2 - XML External Entity Injection via Multibyte Encoded Characters
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2015-5161. PoCs published by Dawid Golunski.
AI-analyzed exploit summary This exploit demonstrates an XML External Entity (XXE) injection vulnerability in eBay Magento's SOAP API when served with PHP FPM. It bypasses sanitization using multibyte encodings to read arbitrary files or cause denial of service.
Description
The Zend_Xml_Security::scan in ZendXml before 1.0.1 and Zend Framework before 1.12.14, 2.x before 2.4.6, and 2.5.x before 2.5.2, when running under PHP-FPM in a threaded environment, allows remote attackers to bypass security checks and conduct XML external entity (XXE) and XML entity expansion (XEE) attacks via multibyte encoded characters.
Exploits (2)
This exploit demonstrates an XML External Entity (XXE) injection vulnerability in eBay Magento's SOAP API when served with PHP FPM. It bypasses sanitization using multibyte encodings to read arbitrary files or cause denial of service.
This exploit demonstrates an XXE (XML External Entity) injection vulnerability in Zend Framework when running under PHP-FPM. The PoC bypasses the framework's security controls by using UTF-16 encoding and network access restrictions to read arbitrary files.