CVE-2015-5243: Code Injection

August 20, 2018 (updated June 26, 2019)

phpWhois allows remote attackers to execute arbitrary code via a crafted whois record.

References

github.com/sbaresearch/advisories/tree/public/2018/SBA-ADV-20180425-01_phpWhois_Code_Execution

Detect and mitigate CVE-2015-5243 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →