Description

The session extension in PHP before 5.2.4 might allow local users to bypass open_basedir restrictions via a session file that is a symlink.

Remediation

References

CVE-2007-4652

Related Vulnerabilities

PHP Insufficient Verification of Data Authenticity Vulnerability (CVE-2024-5458)

WordPress Plugin Image Gallery-Responsive Photo Gallery SQL Injection (1.8.9)

Claroline Other Vulnerability (CVE-2006-5256)

WordPress Plugin Post Grid, Post Carousel, & List Category Posts-by Smart Post Show Cross-Site Request Forgery (2.3.4)

PHP Resource Management Errors Vulnerability (CVE-2010-1917)

Severity

Medium

Classification

CVE-2007-4652 CWE-59

Tags

Missing Update Known Vulnerabilities