Description
rfc1867.c in PHP before 5.0.2 allows local users to upload files to arbitrary locations via a PHP script with a certain MIME header that causes the "$_FILES" array to be modified.
Remediation
References
Related Vulnerabilities
MongoDb Improperly Controlled Sequential Memory Allocation Vulnerability (CVE-2026-13056)
Ruby on Rails Missing Encryption of Sensitive Data Vulnerability (CVE-2010-3299)
WordPress Plugin Portfolio-WordPress Portfolio Cross-Site Request Forgery (2.8.8)
MediaWiki Improper Access Control Vulnerability (CVE-2015-8008)