Description
The copy function in file.c in PHP 4.4.2 and 5.1.2 allows local users to bypass safe mode and read arbitrary files via a source argument containing a compress.zlib:// URI.
Remediation
References
Related Vulnerabilities
Oracle Application Server CVE-2008-0345 Vulnerability (CVE-2008-0345)
WordPress Plugin Product list Widget for Woocommerce Cross-Site Scripting (1.0)
YetiForce CRM Improper Input Validation Vulnerability (CVE-2021-4111)
Oracle Database Server Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-1675)