Summary
PHP is prone to a security-bypass vulnerability.
Remote attackers can exploit this issue to bypass certain security restrictions and create arbitrary files in the context of the application.
Versions prior to PHP 5.3.9 are vulnerable.
Solution
Updates are available. Please see the references for more information.
References
Severity
Classification
-
CVE CVE-2012-0057 -
CVSS Base Score: 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:N
Related Vulnerabilities