Description

rfc1867.c in PHP before 5.0.2 allows local users to upload files to arbitrary locations via a PHP script with a certain MIME header that causes the "$_FILES" array to be modified.

Remediation

References

CVE-2004-0959

Related Vulnerabilities

Claroline Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-3716)

phpMyFAQ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-5863)

Moodle Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2020-14322)

WordPress Plugin Nextend Facebook Connect Cross-Site Scripting (1.5.0)

OpenVPN AS Other Vulnerability (CVE-2005-3393)

Severity

Low

Classification

CVE-2004-0959

Tags

Missing Update Known Vulnerabilities