Eval Injection Vulnerability in HttpCache Class in Symfony 2.x before 2.3.27, 2.4.x and 2.5.x before 2.5.11, and 2.6.x before 2.6.6

CVE-2015-2308 · MEDIUM Severity

AV:N/AC:M/AU:N/C:P/I:P/A:P

Eval injection vulnerability in the HttpCache class in HttpKernel in Symfony 2.x before 2.3.27, 2.4.x and 2.5.x before 2.5.11, and 2.6.x before 2.6.6 allows remote attackers to execute arbitrary PHP code via a language="php" attribute of a SCRIPT element.

Learn more about our Web Application Penetration Testing UK.