Description
PHP 5 before 5.2.3 does not enforce the open_basedir or safe_mode restriction in certain cases, which allows context-dependent attackers to determine the existence of arbitrary files by checking if the readfile function returns a string. NOTE: this issue might also involve the realpath function.
Remediation
References
Related Vulnerabilities
PHP Other Vulnerability (CVE-2003-0097)
WordPress Plugin Affiliates Manager Cross-Site Scripting (2.8.9)
WordPress Plugin WP Smart Import: Import any XML File to WordPress Cross-Site Scripting (1.0.2)
MySQL CVE-2024-21157 Vulnerability (CVE-2024-21157)
WordPress Plugin Calendar Event Multi View Unspecified Vulnerability (1.3.58)