Description
PHP 3.x (PHP3) on Apache 1.3.6 allows remote attackers to read arbitrary files via a modified .. (dot dot) attack containing "%5c" (encoded backslash) sequences.
Remediation
References
Related Vulnerabilities
SharePoint Other Vulnerability (CVE-2020-1147)
WordPress Plugin JW Player 6 Cross-Site Scripting (2.1.14)
PHP Permissions, Privileges, and Access Controls Vulnerability (CVE-2007-1460)
WordPress Plugin Video Comments Webcam Recorder Cross-Site Scripting (1.55)
WordPress Plugin Jetpack-WP Security, Backup, Speed, & Growth Cross-Site Scripting (3.5.2)