Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
PHP Improper Input Validation Vulnerability - CVE-2015-4598 - Vulnerability Database
PHP

PHP Improper Input Validation Vulnerability - CVE-2015-4598

Medium
Reference: CVE-2015-4598
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2015-4598
Title: PHP Improper Input Validation Vulnerability
Overview:

PHP before 5.4.42 5.5.x before 5.5.26 and 5.6.x before 5.6.10 does not ensure that pathnames lack 00 sequences which might allow remote attackers to read or write to arbitrary files via crafted input to an application that calls (1) a DOMDocument save method or (2) the GD imagepsloadfont function as demonstrated by a filename0.html attack that bypasses an intended configuration in which client users may write to only .html files.