Description

The readfile function in PHP 4.4.4, 5.1.6, and 5.2.1 allows context-dependent attackers to bypass safe_mode restrictions and read arbitrary files by referring to local files with a certain URL syntax instead of a pathname syntax, as demonstrated by a filename preceded a "php://../../" sequence.

Remediation

References

CVE-2007-1710

Related Vulnerabilities

phpMyAdmin Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2012-5159)

Apache Traffic Server Improper Input Validation Vulnerability (CVE-2022-25763)

TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-36107)

WordPress Plugin WebHotelier for WordPress Cross-Site Scripting (1.5)

WordPress Plugin Are You a Human-The Fun Spam Blocker Cross-Site Scripting (1.4.32)

Severity

Medium

Classification

CVE-2007-1710

Tags

Missing Update Known Vulnerabilities