CVE-2013-1824

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

4.31%

Published

Sep 16, 2013

Modified

Apr 28, 2026

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

The SOAP parser in PHP before 5.3.22 and 5.4.x before 5.4.12 allows remote attackers to read arbitrary files via a SOAP WSDL file containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue in the soap_xmlParseFile and soap_xmlParseMemory functions.

Weaknesses (CWE)

CWE-611

Affected Products (5)

redhat · enterprise_linuxvulnerable

apple · mac_os_x (up to 10.8.5)vulnerable

php · php (up to 5.3.22)vulnerable

php · php (up to 5.4.12)vulnerable

References (12)

http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=188c196d4da60bdde9190d2fc532650d17f7af2d

http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=afe98b7829d50806559acac9b530acb8283c3bf4

http://lists.apple.com/archives/security-announce/2013/Sep/msg00002.html

Broken LinkMailing List