2 matches found
CVE-2004-0959: Undefined Security Weakness
rfc1867.c in PHP before 5.0.2 allows local users to upload files to arbitrary locations via a PHP script with a certain MIME header that causes the "$FILES" array to be modified...
2.1CVSS5.9AI score0.00577EPSS
SaveExploits0References1
[VulnWatch] Php Vulnerability N. 2
Let's go for the second one: ========================================= Title: Overwrite $FILE array in rfc1867 - Mime multipart/form-data File Upload Affected: Php = 5.0.1 Not Affected: it seems none Vulnerability Type: Possible write of a downloaded file in an arbitrary location. Vendor Status:...
2.5AI score
SaveExploits0
20