Description
The posix_mkfifo function in ext/posix/posix.c in PHP before 5.2.12 and 5.3.x before 5.3.1 allows context-dependent attackers to bypass open_basedir restrictions, and create FIFO files, via the pathname and mode arguments, as demonstrated by creating a .htaccess file.
Remediation
References
Related Vulnerabilities
WordPress Plugin MW WP Form Arbitrary File Deletion (5.0.3)
XWiki Improper Encoding or Escaping of Output Vulnerability (CVE-2023-45135)
Chamilo Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2022-40407)
WordPress Plugin ActiveCampaign-Forms, Site Tracking, Live Chat Cross-Site Request Forgery (8.0.1)