PHP Hash Table Overwrite Arbitrary Code Execution Vulnerability

php-security.org — The session extension does not set the correct reference count value for the session variables, because it does not include the internal pointer from within the session globals. Due to this unsetting _SESSION and HTTP_SESSION_VARS will destroy the Hashtable containing the session data although the session extension still has an internal pointer to Apr 2, 2007 View in Crawl 4