Description
The session extension in PHP before 5.2.4 might allow local users to bypass open_basedir restrictions via a session file that is a symlink.
Remediation
References
Related Vulnerabilities
XWiki Missing Authorization Vulnerability (CVE-2023-37910)
WordPress Plugin Portfolio-WordPress Portfolio Cross-Site Scripting (2.8.10)
Dot CMS Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2017-3189)
WordPress Plugin yolink Search for WordPress 'bulkcrawl.php' SQL Injection (1.1.4)
WordPress Plugin MPL-Publisher-Create your Ebook & Audiobook Cross-Site Scripting (1.30.2)