CVE-2023-6654 | PHPEMS 6.x/7.0 Session Data lib/session.cls.php deserialization

A vulnerability classified as critical was found in PHPEMS 6.x/7.0. Affected by this vulnerability is an unknown functionality in the library lib/session.cls.php of the component Session Data Handler. The manipulation leads to deserialization.

This vulnerability is known as CVE-2023-6654. The attack can be launched remotely. Furthermore, there is an exploit available.