CVE-2020-4043 | BDVDB-2026-137115 Detail
phpMusselphpMussel
Description#
phpMussel from versions 1.0.0 and less than 1.6.0 has an unserialization vulnerability in PHP's phar wrapper. Uploading a specially crafted file to an affected version allows arbitrary code execution (discovered, tested, and confirmed by myself), so the risk factor should be regarded as very high. Newer phpMussel versions don't use PHP's phar wrapper, and are therefore unaffected. This has been fixed in version 1.6.0.
Impact#
Per CVSS v3.1: confidentiality impact none, integrity impact high, availability impact none. Attack vector: network.
Weaknesses#
- CWE-502 Deserialization of Untrusted Data
References#
- https://github.com/phpMussel/phpMussel/security/advisories/GHSA-qr95-4mq5-r3fh
- https://github.com/phpMussel/phpMussel/issues/167
- https://github.com/phpMussel/phpMussel/pull/173
- https://github.com/phpMussel/phpMussel/commit/97f25973433921c1f953430f32d3081adc4851a4
- https://github.com/phpMussel/phpMussel/security/policy#currently-known-vulnerabilities
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.