Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
PHP Permissions Privileges and Access Controls Vulnerability - CVE-2010-1130 - Vulnerability Database
PHP

PHP Permissions Privileges and Access Controls Vulnerability - CVE-2010-1130

Medium
Reference: CVE-2010-1130
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2010-1130
Title: PHP Permissions Privileges and Access Controls Vulnerability
Overview:

session.c in the session extension in PHP before 5.2.13 and 5.3.1 does not properly interpret (semicolon) characters in the argument to the session_save_path function which allows context-dependent attackers to bypass open_basedir and safe_mode restrictions via an argument that contains multiple characters in conjunction with a .. (dot dot).