Description

The safe_mode implementation in PHP before 5.2.13 does not properly handle directory pathnames that lack a trailing / (slash) character, which allows context-dependent attackers to bypass intended access restrictions via vectors related to use of the tempnam function.

Remediation

References

CVE-2010-1129

Related Vulnerabilities

Dot CMS Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2016-8908)

WordPress Plugin Social Sharing-Social Warfare Malicious Code (4.4.7.1)

WordPress Plugin WP-Backgrounds Lite Cross-Site Request Forgery (2.3)

WordPress 5.3.x Multiple Vulnerabilities (5.3 - 5.3.14)

LimeSurvey Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-42112)

Severity

High

Classification

CVE-2010-1129 CWE-20

Tags

Missing Update Known Vulnerabilities