Description
The file-upload implementation in rfc1867.c in PHP before 5.4.0 does not properly handle invalid [ (open square bracket) characters in name values, which makes it easier for remote attackers to cause a denial of service (malformed $_FILES indexes) or conduct directory traversal attacks during multi-file uploads by leveraging a script that lacks its own filename restrictions.
Remediation
References
Related Vulnerabilities
Apache HTTP Server Other Vulnerability (CVE-2010-0408)
WordPress Plugin WP Mail Logging Security Bypass (1.9.9)
Lighttpd Other Vulnerability (CVE-2007-3949)
Apache HTTP Server Improper Input Validation Vulnerability (CVE-2015-0228)
ownCloud Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-2049)