Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
PHP Permissions Privileges and Access Controls Vulnerability - CVE-2013-1635 - Vulnerability Database
PHP

PHP Permissions Privileges and Access Controls Vulnerability - CVE-2013-1635

High
Reference: CVE-2013-1635
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2013-1635
Title: PHP Permissions Privileges and Access Controls Vulnerability
Overview:

ext/soap/soap.c in PHP before 5.3.22 and 5.4.x before 5.4.13 does not validate the relationship between the soap.wsdl_cache_dir directive and the open_basedir directive which allows remote attackers to bypass intended access restrictions by triggering the creation of cached SOAP WSDL files in an arbitrary directory.