Description

curl/interface.c in the cURL library (aka libcurl) in PHP 5.2.4 and 5.2.5 allows context-dependent attackers to bypass safe_mode and open_basedir restrictions and read arbitrary files via a file:// request containing a \x00 sequence, a different vulnerability than CVE-2006-2563.

Remediation

References

CVE-2007-4850

Related Vulnerabilities

Atlassian Jira Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-14164)

WordPress Plugin Custom Dashboard & Login Page-AGCA Cross-Site Scripting (6.9.1)

WordPress Plugin WP Support Plus Responsive Ticket System Unspecified Vulnerability (8.0.7)

WordPress Plugin Ultimate TinyMCE Multiple Unspecified Vulnerabilities (5.0)

Oracle HTTP Server Out-of-bounds Read Vulnerability (CVE-2021-35940)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-264 CVE-2007-4850