Description
The copy function in file.c in PHP 4.4.2 and 5.1.2 allows local users to bypass safe mode and read arbitrary files via a source argument containing a compress.zlib:// URI.
Remediation
References
Related Vulnerabilities
MySQL CVE-2019-2486 Vulnerability (CVE-2019-2486)
WordPress Plugin WooCommerce-Store Toolkit Privilege Escalation (1.5.7)
Envoy Proxy Excessive Iteration Vulnerability (CVE-2021-32778)
Apache HTTP Server Other Vulnerability (CVE-2004-0173)
WordPress Plugin Aspose Cloud eBook Generator Arbitrary File Download (1.0)