Description
The copy function in file.c in PHP 4.4.2 and 5.1.2 allows local users to bypass safe mode and read arbitrary files via a source argument containing a compress.zlib:// URI.
Remediation
References
Related Vulnerabilities
Oracle Database Server CVE-2010-4421 Vulnerability (CVE-2010-4421)
WordPress Plugin WP-Filebase Download Manager Cross-Site Scripting (3.4.4)
OpenSSL Cryptographic Issues Vulnerability (CVE-2019-1543)
MySQL CVE-2015-4800 Vulnerability (CVE-2015-4800)
WordPress Plugin Google XML Sitemap for Videos Cross-Site Request Forgery (2.6.1)