Description
rfc1867.c in PHP before 5.0.2 allows local users to upload files to arbitrary locations via a PHP script with a certain MIME header that causes the "$_FILES" array to be modified.
Remediation
References
Related Vulnerabilities
MySQL CVE-2023-22110 Vulnerability (CVE-2023-22110)
WordPress Plugin Contact Form by BestWebSoft Cross-Site Scripting (3.95)
IBM RTC Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-1570)
WordPress Plugin Package Quantity Discount Security Bypass (1.1.2)
WordPress Plugin Contextual Related Posts Cross-Site Request Forgery (1.8.6)