PHP 7.1.0 / 5.6.29 missing null byte checks for paths in curl_file_create() Vulnerability

Exploit for php platform in category dos / poc Description: ------------ Missing null byte checks for paths in curlfilector curlfilecreate doesn’t ensure that pathnames lack NULL byte, which might allow attacker to manipulate the upload file name and path. Affected code:...