tocsin

CVE-2015-5243

9 advisories.

Packagist/jsmitty12/phpwhois CVE-2015-5243: critical 9.8, EPSS 6.19%

phpWhois arbitrary code execution via a crafted whois record

Action: Upgrade jsmitty12/phpwhois to 5.1.0 or later.

composer require jsmitty12/phpwhois:5.1.0

Affected

introducedfixedlast affected
05.1.0-

Fixed versions

5.1.0

Sources

CVE-2015-5243 · published · modified · JSON

Packagist/phpwhois/phpwhois CVE-2015-5243: critical 9.8, EPSS 6.19%

phpWhois arbitrary code execution via a crafted whois record

Action: No fix published. Pin and monitor.

Affected

introducedfixedlast affected
0-4.2.5

Fixed versions

No fixed version in the source.

Sources

CVE-2015-5243 · published · modified · JSON

Packagist/brightlocal/phpwhois CVE-2015-5243: critical 9.8, EPSS 6.19%

phpWhois arbitrary code execution via a crafted whois record

Action: No fix published. Pin and monitor.

Affected

introducedfixedlast affected
0-4.2.5

Fixed versions

No fixed version in the source.

Sources

CVE-2015-5243 · published · modified · JSON

Packagist/david-garcia/phpwhois CVE-2015-5243: critical 9.8, EPSS 6.19%

phpWhois arbitrary code execution via a crafted whois record

Action: No fix published. Pin and monitor.

Affected

introducedfixedlast affected
0-4.3.1

Fixed versions

No fixed version in the source.

Sources

CVE-2015-5243 · published · modified · JSON

Packagist/ivankristianto/phpwhois CVE-2015-5243: critical 9.8, EPSS 6.19%

phpWhois arbitrary code execution via a crafted whois record

Action: No fix published. Pin and monitor.

Affected

introducedfixedlast affected
0-4.3.0

Fixed versions

No fixed version in the source.

Sources

CVE-2015-5243 · published · modified · JSON

Packagist/kazist/phpwhois CVE-2015-5243: critical 9.8, EPSS 6.19%

phpWhois arbitrary code execution via a crafted whois record

Action: No fix published. Pin and monitor.

Affected

introducedfixedlast affected
0-4.2.6

Fixed versions

No fixed version in the source.

Sources

CVE-2015-5243 · published · modified · JSON

Packagist/serluck/phpwhois CVE-2015-5243: critical 9.8, EPSS 6.19%

phpWhois arbitrary code execution via a crafted whois record

Action: No fix published. Pin and monitor.

Affected

introducedfixedlast affected
0-4.2.6

Fixed versions

No fixed version in the source.

Sources

CVE-2015-5243 · published · modified · JSON

Packagist/simple-updates/phpwhois CVE-2015-5243: critical 9.8, EPSS 6.19%

phpWhois arbitrary code execution via a crafted whois record

Action: No fix published. Pin and monitor.

Affected

introducedfixedlast affected
0-1.0.0

Fixed versions

No fixed version in the source.

Sources

CVE-2015-5243 · published · modified · JSON

Packagist/truckersmp/phpwhois CVE-2015-5243: critical 9.8, EPSS 6.19%

phpWhois arbitrary code execution via a crafted whois record

Action: No fix published. Pin and monitor.

Affected

introducedfixedlast affected
0-4.3.1

Fixed versions

No fixed version in the source.

Sources

CVE-2015-5243 · published · modified · JSON