Description
The session extension in PHP before 5.2.4 might allow local users to bypass open_basedir restrictions via a session file that is a symlink.
Remediation
References
Related Vulnerabilities
WordPress Plugin Print Invoice & Delivery Notes for WooCommerce Cross-Site Scripting (4.7.1)
Drupal Incorrect Authorization Vulnerability (CVE-2011-2726)
WordPress Plugin Hellodialog Unspecified Vulnerability (1.0.2)
MediaWiki Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2008-1318)