Description

Unspecified vulnerabilities in PHP, probably before 5.2.0, allow local users to bypass open_basedir restrictions and perform unspecified actions via unspecified vectors involving the (1) chdir and (2) tempnam functions. NOTE: the tempnam vector might overlap CVE-2006-1494.

Remediation

References

CVE-2006-5706

Related Vulnerabilities

MySQL Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2012-5611)

TCExam Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2020-5744)

Chamilo Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-0738)

Magento Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2018-5301)

WordPress Improper Privilege Management Vulnerability (CVE-2020-28035)

Severity

High

Classification

CVE-2006-5706

Tags

Missing Update Known Vulnerabilities