Description
Directory traversal vulnerability in the PharData class in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before 5.6.12 allows remote attackers to write to arbitrary files via a .. (dot dot) in a ZIP archive entry that is mishandled during an extractTo call.
Remediation
References
Related Vulnerabilities
WebLogic CVE-2021-2033 Vulnerability (CVE-2021-2033)
Oracle Database Server Credentials Management Errors Vulnerability (CVE-2007-6260)
Oracle JRE CVE-2020-2767 Vulnerability (CVE-2020-2767)
WordPress Plugin Ibtana-Ecommerce Product Addons Cross-Site Scripting (0.2.3)
WordPress Plugin RAYS Grid Cross-Site Request Forgery (1.2.2)