Description
PHP before 5.2.12 does not properly handle session data, which has unspecified impact and attack vectors related to (1) interrupt corruption of the SESSION superglobal array and (2) the session.save_path directive.
Remediation
References
Related Vulnerabilities
WordPress 5.2.x Multiple Vulnerabilities (5.2 - 5.2.19)
LimeSurvey Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2007-5573)
WordPress Plugin WP-Members Membership Unspecified Vulnerability (3.1.9.2)
WordPress Plugin Booking Calendar PHP Object Injection (9.1)
MySQL Incorrect Authorization Vulnerability (CVE-2025-50085)