Description
Multiple directory traversal vulnerabilities in PHP 5.2.6 and earlier allow context-dependent attackers to bypass safe_mode restrictions by creating a subdirectory named http: and then placing ../ (dot dot slash) sequences in an http URL argument to the (1) chdir or (2) ftok function.
Remediation
References
Related Vulnerabilities
OpenSSL Improper Certificate Validation Vulnerability (CVE-2023-0464)
WordPress Plugin Google Pagespeed Insights Cross-Site Scripting (3.0.0)
WordPress Plugin Events Manager Cross-Site Scripting (5.9.5)
WordPress Plugin Thank You Counter Button Multiple Cross-Site Scripting Vulnerabilities (1.8.7)
WordPress Plugin WooCommerce Upload My File Cross-Site Request Forgery (0.3.9)