Description

The safe_mode implementation in PHP before 5.2.13 does not properly handle directory pathnames that lack a trailing / (slash) character, which allows context-dependent attackers to bypass intended access restrictions via vectors related to use of the tempnam function.

Remediation

References

CVE-2010-1129

Related Vulnerabilities

Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-45151)

WordPress Plugin WP Media Cleaner Multiple Cross-Site Scripting Vulnerabilities (2.2.6)

Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2015-3176)

WordPress Plugin WooCommerce Social Login PHP Object Injection (2.6.2)

WordPress Plugin jRSS Widget 'url' Parameter Directory Traversal (1.1.1)

Severity

High

Classification

CVE-2010-1129 CWE-20

Tags

Missing Update Known Vulnerabilities