Description

The cURL library (libcurl) in PHP 4.4.2 and 5.1.4 allows attackers to bypass safe mode and read files via a file:// request containing null characters.

Remediation

References

CVE-2006-2563

Related Vulnerabilities

Piwigo Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-9836)

Joomla Other Vulnerability (CVE-2005-4650)

Django Improper Authentication Vulnerability (CVE-2013-1443)

Moodle Cryptographic Issues Vulnerability (CVE-2009-4302)

WordPress Plugin Gallery-Flagallery Photo Portfolio 'flagshow.php' Cross-Site Scripting (1.57)

Severity

Low

Classification

CVE-2006-2563

Tags

Missing Update Known Vulnerabilities