Description

Unknown vulnerability in CGI module for PHP 4.3.0 allows attackers to access arbitrary files as the PHP user, and possibly execute PHP code, by bypassing the CGI force redirect settings (cgi.force_redirect or --enable-force-cgi-redirect).

Remediation

References

CVE-2003-0097

Related Vulnerabilities

WordPress Plugin Booster for WooCommerce Cross-Site Scripting (5.6.1)

Dot CMS Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2017-11466)

WordPress Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2015-5731)

osTicket Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-1176)

Python CVE-2022-42919 Vulnerability (CVE-2022-42919)

Severity

High

Classification

CVE-2003-0097

Tags

Missing Update Known Vulnerabilities