PHP Improper Link Resolution Before File Access (Link Following) Vulnerability - CVE-2007-4652 - Vulnerability Database

PHP Improper Link Resolution Before File Access (Link Following) Vulnerability - CVE-2007-4652

Medium

Reference: CVE-2007-4652

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2007-4652

Title: PHP Improper Link Resolution Before File Access (Link Following) Vulnerability

Overview:

The session extension in PHP before 5.2.4 might allow local users to bypass open_basedir restrictions via a session file that is a symlink.