85 matches found
CVE-2007-4652
The session extension in PHP before 5.2.4 might allow local users to bypass openbasedir restrictions via a session file that is a symlink...
CVE-2007-4652
The CVE-2007-4652 issue affects PHP before 5.2.4, where an attacker could bypass open_basedir restrictions by abusing a session file that is a symlink. This local-privilege impact occurs through the Session extension, enabling bypass of directory containment for affected PHP processes. The core v...
CVE-2006-4652
CVE-2006-4652 affects the applications Amazing Little Poll and Amazing Little Picture Poll, which ship with a default password of dsapoll. This allows remote attackers to create a new poll by submitting default credentials through lp_admin.php. The known entry provides a basic description and CVS...
