Description

PHP before 5.3.9 has improper libxslt security settings, which allows remote attackers to create arbitrary files via a crafted XSLT stylesheet that uses the libxslt output extension.

Remediation

References

CVE-2012-0057

Related Vulnerabilities

ownCloud Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-0307)

Drupal Core 4.6.x Cross-Site Scripting (4.6.0 - 4.6.5)

WordPress Plugin WP Content Copy Protection & No Right Click Cross-Site Request Forgery (3.1.5)

phpMyAdmin Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2013-5000)

Liferay DXP Observable Discrepancy Vulnerability (CVE-2024-26268)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-264 CVE-2012-0057