Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
PHP Improper Input Validation Vulnerability - CVE-2006-7243 - Vulnerability Database
PHP

PHP Improper Input Validation Vulnerability - CVE-2006-7243

Medium
Reference: CVE-2006-7243
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2006-7243
Title: PHP Improper Input Validation Vulnerability
Overview:

PHP before 5.3.4 accepts the 0 character in a pathname which might allow context-dependent attackers to bypass intended access restrictions by placing a safe file extension after this character as demonstrated by .php0.jpg at the end of the argument to the file_exists function.