CVE-2015-6834

CRITICAL

PHP < 5.4.45 - Remote Code Execution via Unserialization Use-After-Free

Title source: llm

Exploitation Summary

EIP tracks 2 public exploits for CVE-2015-6834. PoCs published by Taoguang Chen.

AI-analyzed exploit summary This exploit demonstrates a use-after-free vulnerability in PHP's unserialize() function with SplObjectStorage, allowing arbitrary memory manipulation and potential remote code execution. The PoC crafts a serialized payload to trigger the vulnerability during deserialization.

Description

Multiple use-after-free vulnerabilities in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13 allow remote attackers to execute arbitrary code via vectors related to (1) the Serializable interface, (2) the SplObjectStorage class, and (3) the SplDoublyLinkedList class, which are mishandled during unserialization.

Exploits (2)

exploitdb WORKING POC VERIFIED

by Taoguang Chen · textdosphp

https://www.exploit-db.com/exploits/38122

View Code ZIP pw:eip

This exploit demonstrates a use-after-free vulnerability in PHP's unserialize() function with SplObjectStorage, allowing arbitrary memory manipulation and potential remote code execution. The PoC crafts a serialized payload to trigger the vulnerability during deserialization.

Classification

Working Poc 95%

Attack Type

Rce

Complexity

Moderate

Reliability

Reliable

Target: PHP 5.6 < 5.6.13, PHP 5.5 < 5.5.29, PHP 5.4 < 5.4.45

No auth needed

Prerequisites: PHP environment with vulnerable version · Ability to pass crafted serialized data to unserialize()

MITRE ATT&CK

T1068 - Exploitation for Privilege Escalation T1190 - Exploit Public-Facing Application

devstral-2 · analyzed Feb 16, 2026 Full analysis →