CVE-2004-0959

rfc1867.c in PHP before 5.0.2 allows local users to upload files to arbitrary locations via a PHP script with a certain MIME header that causes the "$FILES" array to be modified...

CVE-2004-0959

rfc1867.c in PHP before 5.0.2 allows local users to upload files to arbitrary locations via a PHP script with a certain MIME header that causes the "$FILES" array to be modified...

CVE-2004-0959

The CVE-2004-0959 issue affects PHP’s file upload handling (rfc1867.c) in PHP versions before 5.0.2. A crafted Content-Disposition MIME header can cause the $_FILES array to be modified, enabling a local attacker to upload files to arbitrary locations on the server. Impact is limited to local acc...