Description
The file upload capability in PHP versions 3 and 4 allows remote attackers to read arbitrary files by setting hidden form fields whose names match the names of internal PHP script variables.
Remediation
References
Related Vulnerabilities
WordPress Plugin WordPress Related Posts Cross-Site Scripting (3.6.4)
WordPress Plugin NextGEN Gallery-WordPress Gallery Unspecified Vulnerability (2.2.46)
WordPress Permissions, Privileges, and Access Controls Vulnerability (CVE-2010-5293)
Oracle Application Server Other Vulnerability (CVE-2004-1877)
WordPress Plugin Comments-wpDiscuz Arbitrary File Upload (7.0.4)