Description
The file upload capability in PHP versions 3 and 4 allows remote attackers to read arbitrary files by setting hidden form fields whose names match the names of internal PHP script variables.
Remediation
References
Related Vulnerabilities
Seo Panel Server-Side Request Forgery (SSRF) Vulnerability (CVE-2025-29451)
Oracle Database Server Other Vulnerability (CVE-2002-1767)
Jenkins Use of Insufficiently Random Values Vulnerability (CVE-2020-2099)
Plone CMS Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-7061)
WordPress Plugin Contact Form Unspecified Vulnerability (1.1.9)