| Package | Affected versions | Patched versions |
|---|---|---|
| php | ≥ 5.4.0, < 5.4.12< 5.3.22 | 5.4.125.3.22 |
The SOAP parser in PHP before 5.3.22 and 5.4.x before 5.4.12 allows remote attackers to read arbitrary files via a SOAP WSDL file containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue in the soap_xmlParseFile and soap_xmlParseMemory functions.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free