CVE-2022-31625

CVE-2022-31625是PHP中的一个远程代码执行漏洞。这个漏洞是由于PHP_FUNCTION中分配在堆上的数组清除不及时导致的。攻击者可以通过错误地再次调用php_pgsql_free_params()函数，并使用之前未及时清除的数组值，从而实现远程代码执行。这个漏洞可能影响基于PHP的数据库管理软件，例如Adminer和PHPmyAdmin。为了防止此漏洞的利用，建议及时升级到修复了该漏洞的PHP版本。<span class="em">1</span><span class="em">2</span><span class="em">3</span>
#### 引用[.reference_title]
- *1* [CVE-2022-33891POCApache Spark 命令注入（CVE-2022-33891）POC](https://download.csdn.net/download/qq_51577576/86396832)[target="_blank" data-report-click={"spm":"1018.2226.3001.9630","extra":{"utm_source":"vip_chatgpt_common_search_pc_result","utm_medium":"distribute.pc_search_result.none-task-cask-2~all~insert_cask~default-1-null.142^v93^chatsearchT3_1"}}] [.reference_item style="max-width: 33.333333333333336%"]
- *2* [烽火狼烟丨PHP远程代码执行漏洞（CVE-2022-31625、CVE-2022-31626）风险提示](https://blog.csdn.net/C20220511/article/details/125258528)[target="_blank" data-report-click={"spm":"1018.2226.3001.9630","extra":{"utm_source":"vip_chatgpt_common_search_pc_result","utm_medium":"distribute.pc_search_result.none-task-cask-2~all~insert_cask~default-1-null.142^v93^chatsearchT3_1"}}] [.reference_item style="max-width: 33.333333333333336%"]
- *3* [【安全要闻】PHP多个远程代码执行漏洞风险预警](https://blog.csdn.net/qzt961003/article/details/125317187)[target="_blank" data-report-click={"spm":"1018.2226.3001.9630","extra":{"utm_source":"vip_chatgpt_common_search_pc_result","utm_medium":"distribute.pc_search_result.none-task-cask-2~all~insert_cask~default-1-null.142^v93^chatsearchT3_1"}}] [.reference_item style="max-width: 33.333333333333336%"]
[ .reference_list ]