Description

The session extension in PHP before 5.2.4 might allow local users to bypass open_basedir restrictions via a session file that is a symlink.

Remediation

References

CVE-2007-4652

Related Vulnerabilities

WordPress Plugin Themify Portfolio Post Cross-Site Scripting (1.2.0)

Jenkins Improper Input Validation Vulnerability (CVE-2017-1000401)

Oracle Application Server Other Vulnerability (CVE-2002-0566)

Oracle Database Server CVE-2020-2527 Vulnerability (CVE-2020-2527)

ReviveAdserver Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-22888)

Severity

Medium

Classification

CVE-2007-4652 CWE-59

Tags

Missing Update Known Vulnerabilities