Description

Directory traversal vulnerability in PHP 5.2.4 and earlier allows attackers to bypass open_basedir restrictions and possibly execute arbitrary code via a .. (dot dot) in the dl function.

Remediation

References

CVE-2007-4825

Related Vulnerabilities

Sqlite Incorrect Conversion between Numeric Types Vulnerability (CVE-2019-19317)

WordPress Plugin Login Block IPs Cross-Site Request Forgery (1.0.0)

WordPress Plugin BulletProof Security Cross-Site Scripting (.47)

WordPress Plugin Scroll Baner Cross-Site Request Forgery (1.0)

WordPress Plugin WP Table Builder-WordPress Table Cross-Site Scripting (1.4.6)

Severity

High

Classification

CVE-2007-4825 CWE-22

Tags

Missing Update Known Vulnerabilities