Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
PHP Improper Input Validation Vulnerability - CVE-2014-5120 - Vulnerability Database
PHP

PHP Improper Input Validation Vulnerability - CVE-2014-5120

Medium
Reference: CVE-2014-5120
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2014-5120
Title: PHP Improper Input Validation Vulnerability
Overview:

gd_ctx.c in the GD component in PHP 5.4.x before 5.4.32 and 5.5.x before 5.5.16 does not ensure that pathnames lack 00 sequences which might allow remote attackers to overwrite arbitrary files via crafted input to an application that calls the (1) imagegd (2) imagegd2 (3) imagegif (4) imagejpeg (5) imagepng (6) imagewbmp or (7) imagewebp function.