Description

move_uploaded_file in PHP does not does not check for the base directory (open_basedir), which could allow remote attackers to upload files to unintended locations on the system.

Remediation

References

CVE-2002-0484

Related Vulnerabilities

MediaWiki Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2010-2787)

Drupal Other Vulnerability (CVE-2005-2106)

MySQL CVE-2018-3155 Vulnerability (CVE-2018-3155)

WebLogic CVE-2021-2018 Vulnerability (CVE-2021-2018)

PHP Improper Input Validation Vulnerability (CVE-2007-4783)

Severity

Medium

Classification

CVE-2002-0484

Tags

Missing Update Known Vulnerabilities