Description
The MySQL extension in PHP 5.2.4 and earlier allows remote attackers to bypass safe_mode and open_basedir restrictions via the MySQL (1) LOAD_FILE, (2) INTO DUMPFILE, and (3) INTO OUTFILE functions, a different issue than CVE-2007-3997.
Remediation
References
Related Vulnerabilities
SharePoint CVE-2022-41060 Vulnerability (CVE-2022-41060)
WordPress Plugin WP Symposium Arbitrary File Upload Vulnerabilities (11.11.26)
WordPress Plugin Stop User Enumeration Security Bypass (1.3.18)
WordPress Plugin YouTube Advanced by Embed Plus Cross-Site Scripting (5.3)
WordPress Plugin YITH WooCommerce Wishlist Unspecified Vulnerability (2.0.6)