Description
The MySQL extension in PHP 5.2.4 and earlier allows remote attackers to bypass safe_mode and open_basedir restrictions via the MySQL (1) LOAD_FILE, (2) INTO DUMPFILE, and (3) INTO OUTFILE functions, a different issue than CVE-2007-3997.
Remediation
References
Related Vulnerabilities
WordPress Plugin Advanced Post Type Ratings Cross-Site Scripting (1.01)
WordPress Plugin Spryng Payments for WooCommerce Cross-Site Scripting (1.6.7)
WordPress Plugin amtyThumb Cross-Site Scripting (4.1.2)
Jenkins Uncontrolled Resource Consumption Vulnerability (CVE-2012-0785)
XWiki Improper Encoding or Escaping of Output Vulnerability (CVE-2023-26472)