CVE-2004-0959

The CVE-2004-0959 issue affects PHP’s file upload handling (rfc1867.c) in PHP versions before 5.0.2. A crafted Content-Disposition MIME header can cause the $_FILES array to be modified, enabling a local attacker to upload files to arbitrary locations on the server. Impact is limited to local acc...