Vulnerability Details CVE-2015-5687
system/session/drivers/cookie.php in Anchor CMS 0.9.x allows remote attackers to conduct PHP object injection attacks and execute arbitrary PHP code via a crafted serialized object in a cookie.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.006
EPSS Ranking 67.0%
CVSS Severity
CVSS v2 Score 7.5
References
Products affected by CVE-2015-5687
-
cpe:2.3:a:anchorcms:anchor_cms:0.9.1
-
cpe:2.3:a:anchorcms:anchor_cms:0.9.2
-
cpe:2.3:a:anchorcms:anchor_cms:0.9.3