SynopsisPHP 7.0.x < 7.0.31 Use After Free Arbitrary Code Execution in EXIF
DescriptionAccording to its banner, the version of PHP running on the remote web server is 7.0.x prior to 7.0.31 or 7.2.x prior to 7.2.8 . It is, therefore, affected by a use after free arbitrary code execution vulnerability.
Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number.
SolutionUpgrade to PHP version 7.0.31 or later.