Description

PHP 5 before 5.2.3 does not enforce the open_basedir or safe_mode restriction in certain cases, which allows context-dependent attackers to determine the existence of arbitrary files by checking if the readfile function returns a string. NOTE: this issue might also involve the realpath function.

Remediation

References

CVE-2007-3007

Related Vulnerabilities

MySQL CVE-2017-10320 Vulnerability (CVE-2017-10320)

phpMyFAQ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-0313)

ownCloud Resource Management Errors Vulnerability (CVE-2015-6500)

PHP Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2010-3062)

WordPress Plugin Nifty Newsletters (Formerly Sola Newsletters) Cross-Site Request Forgery (4.0.23)

Severity

Medium

Classification

CVE-2007-3007 CWE-264

Tags

Missing Update Known Vulnerabilities