This host is running PHP and is prone to multiple vulnerabilities.

Successful exploitation will allow attackers to retrieve, corrupt or upload arbitrary files, or can cause denial of service via corrupted $_FILES indexes. Impact Level: Application

Upgrade to PHP 5.4.0 or later For updates refer to http://www.php.net/downloads.php

Flaw due to insufficient validation of file-upload implementation in rfc1867.c and it does not handle invalid '[' characters in name values.

PHP version before 5.4.0

• http://cxsecurity.com/cveshow/CVE-2012-1172
• http://secunia.com/advisories/cve_reference/CVE-2012-1172
• http://www.php.net/ChangeLog-5.php

---

Updated on 2015-03-25