Description
The pcntl_exec implementation in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 truncates a pathname upon encountering a \x00 character, which might allow remote attackers to bypass intended extension restrictions and execute files with unexpected names via a crafted first argument. NOTE: this vulnerability exists because of an incomplete fix for CVE-2006-7243.
Remediation
References
Related Vulnerabilities
WordPress Plugin Japanized For WooCommerce Cross-Site Scripting (2.5.4)
WordPress Plugin Multi Plugin Installer Arbitrary File Disclosure (1.1.0)
WordPress Plugin To Top Security Bypass (2.2.2)
WordPress Plugin Event post Local File Inclusion (5.9.5)
Liferay DXP Observable Discrepancy Vulnerability (CVE-2025-43786)