Description

Directory traversal vulnerability in the posix_access function in PHP 5.2.6 and earlier allows remote attackers to bypass safe_mode restrictions via a .. (dot dot) in an http URL, which results in the URL being canonicalized to a local filename after the safe_mode check has successfully run.

Remediation

References

CVE-2008-2665

Related Vulnerabilities

Ampache Improper Authentication Vulnerability (CVE-2007-4438)

WordPress Plugin WooCommerce Product Feed for Google, Facebook, eBay and Many More Cross-Site Request Forgery (1.5.26)

WordPress Plugin Page Builder:KingComposer-Free Drag and Drop page builder by King-Theme Cross-Site Scripting (2.8.2)

Moodle Improper Validation of Integrity Check Value Vulnerability (CVE-2021-20184)

WordPress Plugin Oleggo LiveStream Cross-Site Scripting (0.2.6)

Severity

Medium

Classification

CVE-2008-2665 CWE-22

Tags

Missing Update Known Vulnerabilities