Description

Multiple vulnerabilities in PHP before 4.4.1 allow remote attackers to bypass safe_mode and open_basedir restrictions via unknown attack vectors in (1) ext/curl and (2) ext/gd.

Remediation

References

CVE-2005-3391

Related Vulnerabilities

Atlassian Jira Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-41304)

WordPress Plugin Work The Flow File Upload Arbitrary File Upload (2.5.2)

WordPress Permissions, Privileges, and Access Controls Vulnerability (CVE-2010-5293)

XWikiplatform Incorrect Authorization Vulnerability (CVE-2024-55662)

Magento Permissions, Privileges, and Access Controls Vulnerability (CVE-2015-3458)

Severity

High

Classification

CVE-2005-3391

Tags

Missing Update Known Vulnerabilities