Description

The file upload capability in PHP versions 3 and 4 allows remote attackers to read arbitrary files by setting hidden form fields whose names match the names of internal PHP script variables.

Remediation

References

CVE-2000-0860

Related Vulnerabilities

TYPO3 Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2005-4875)

WordPress Plugin Sticky Related Posts Cross-Site Scripting (1.0)

WordPress Plugin Groups Multiple Cross-Site Scripting Vulnerabilities (1.8.0)

Sqlite CVE-2020-13631 Vulnerability (CVE-2020-13631)

OpenSSL CVE-2023-4807 Vulnerability (CVE-2023-4807)

Severity

Medium

Classification

CVE-2000-0860

Tags

Missing Update Known Vulnerabilities