Description
Archive_Tar through 1.4.10 allows an unserialization attack because phar: is blocked but PHAR: is not blocked.
Remediation
References
Related Vulnerabilities
Atlassian Confluence Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2012-6342)
WordPress Plugin Are You a Human-The Fun Spam Blocker Cross-Site Scripting (1.4.32)
Oracle Database Server CVE-2016-0461 Vulnerability (CVE-2016-0461)
MediaWiki Improper Input Validation Vulnerability (CVE-2017-0368)
WordPress Plugin User Access Manager Cross-Site Scripting (1.2.6.7)