6 matches found
CVE-2011-0754
The SplFileInfo::getType function in the Standard PHP Library SPL extension in PHP before 5.3.4 on Windows does not properly detect symbolic links, which might make it easier for local users to conduct symlink attacks by leveraging cross-platform differences in the stat structure, related to lack...
Cross site scripting
The SplFileInfo::getType function in the Standard PHP Library SPL extension in PHP before 5.3.4 on Windows does not properly detect symbolic links, which might make it easier for local users to conduct symlink attacks by leveraging cross-platform differences in the stat structure, related to lack...
PT-2011-2610
Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.3.4 Description The issue is related to the SplFileInfo::getType function in the Standard PHP Library SPL extension, which does not properly detect symbolic links on Windows. This might make it easier for local users to...
CVE-2011-0754: Improper Link Resolution Before File Access
The SplFileInfo::getType function in the Standard PHP Library SPL extension in PHP before 5.3.4 on Windows does not properly detect symbolic links, which might make it easier for local users to conduct symlink attacks by leveraging cross-platform differences in the stat structure, related to lack...
