Description

Unknown vulnerability in CGI module for PHP 4.3.0 allows attackers to access arbitrary files as the PHP user, and possibly execute PHP code, by bypassing the CGI force redirect settings (cgi.force_redirect or --enable-force-cgi-redirect).

Remediation

References

CVE-2003-0097

Related Vulnerabilities

TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-3715)

Jenkins Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-2231)

Atlassian Jira Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2019-20098)

ownCloud Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-3837)

WordPress Plugin UserPro-Community and User Profile Multiple Vulnerabilities (5.1.1)

Severity

High

Tags

Missing Update Known Vulnerabilities CVE-2003-0097