CyberRota Analysis
This is a critical severity vulnerability with a CVSS score of 9.8. It may be remotely exploitable.
CVE
CVE-2014-3622
Severity
CRITICAL
CVSS
9.8
EPSS
3.12%
Original NVD Description
Use-after-free vulnerability in the add_post_var function in the Posthandler component in PHP 5.6.x before 5.6.1 might allow remote attackers to execute arbitrary code by leveraging a third-party filter extension that accesses a certain ksep value.
Related CVEs
Other vulnerabilities affecting the same vendor(s)