Description

The cURL extension files (1) ext/curl/interface.c and (2) ext/curl/streams.c in PHP before 5.1.5 permit the CURLOPT_FOLLOWLOCATION option when open_basedir or safe_mode is enabled, which allows attackers to perform unauthorized actions, possibly related to the realpath cache.

Remediation

References

CVE-2006-4483

Related Vulnerabilities

MySQL CVE-2021-2179 Vulnerability (CVE-2021-2179)

Dot CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-11846)

Plone CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-5502)

WordPress Plugin FV Flowplayer Video Player Cross-Site Scripting (7.5.2.727)

WordPress Plugin InfiniteWP Client Security Bypass (1.9.4.4)

Severity

Critical

Classification

CVE-2006-4483

Tags

Missing Update Known Vulnerabilities