Description

move_uploaded_file in PHP does not does not check for the base directory (open_basedir), which could allow remote attackers to upload files to unintended locations on the system.

Remediation

References

CVE-2002-0484

Related Vulnerabilities

MongoDb CVE-2024-6384 Vulnerability (CVE-2024-6384)

WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-6814)

YetiForce CRM Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2022-1411)

Joomla Improper Input Validation Vulnerability (CVE-2020-11890)

Drupal Core 8.6.x Multiple Vulnerabilities (8.6.0 - 8.6.5)

Severity

Medium

Classification

CVE-2002-0484

Tags

Missing Update Known Vulnerabilities