Description
move_uploaded_file in PHP does not does not check for the base directory (open_basedir), which could allow remote attackers to upload files to unintended locations on the system.
Remediation
References
Related Vulnerabilities
MathJax Inefficient Regular Expression Complexity Vulnerability (CVE-2023-39663)
WordPress Plugin myFlash Remote File Include (1.10)
WordPress Plugin Smush Image Compression and Optimization Multiple Vulnerabilities (2.9.1)
Django Permissions, Privileges, and Access Controls Vulnerability (CVE-2010-4534)