Description
The RFC1867 file upload feature in PHP 4.x up to 4.4.0 and 5.x up to 5.0.5, when register_globals is enabled, allows remote attackers to modify the GLOBALS array and bypass security protections of PHP applications via a multipart/form-data POST request with a "GLOBALS" fileupload field.
Remediation
References
Related Vulnerabilities
WebLogic CVE-2022-21292 Vulnerability (CVE-2022-21292)
WordPress Plugin WooCommerce Smart Coupons Security Bypass (4.6.0)
Internet Information Services Other Vulnerability (CVE-2003-0224)
Oracle JRE CVE-2019-2962 Vulnerability (CVE-2019-2962)
ownCloud Resource Management Errors Vulnerability (CVE-2015-4717)