Description

PHP before 5.3.9 has improper libxslt security settings, which allows remote attackers to create arbitrary files via a crafted XSLT stylesheet that uses the libxslt output extension.

Remediation

References

CVE-2012-0057

Related Vulnerabilities

Atlassian Confluence Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2021-39114)

WordPress Plugin Essential Real Estate Cross-Site Scripting (1.7.1)

Atlassian Confluence Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-18085)

WordPress Plugin WP VR-360 Panorama and Virtual Tour Builder For WordPress Cross-Site Scripting (8.2.6)

WordPress Plugin File Browser, Manager, Backup (+ Database) Security Bypass (1.23)

Severity

Medium

Classification

CVE-2012-0057 CWE-264

Tags

Missing Update Known Vulnerabilities