Description

This alert was generated using only banner information. It may be a false positive.

PHP is prone to an issue that may allow programs to bypass Safe Mode by calling external files in restricted directories using include() and require().

Affected PHP versions (4.3, 4.3.1, 4.3.2).

Remediation

Upgrade PHP to the latest version.

References

BID 8201

PHP homepage

Related Vulnerabilities

PrestaShop Improper Privilege Management Vulnerability (CVE-2023-43664)

ClipBucket Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2018-7665)

WordPress Plugin WpGenius Job Listing Cross-Site Scripting (1.0.2)

osCommerce Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-43727)

Jenkins Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-2067)

Severity

Medium

Classification

CVE-2003-0863 CWE-829 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

Tags

Missing Update