AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2009-4143

HIGH · CVSS 10 EPSS 2.95%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2009-12-21 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2009-4143
Severity
HIGH
CVSS
10
EPSS
2.95%

Original NVD Description

PHP before 5.2.12 does not properly handle session data, which has unspecified impact and attack vectors related to (1) interrupt corruption of the SESSION superglobal array and (2) the session.save_path directive.