4 matches found
CVE-2011-0754
The SplFileInfo::getType function in the Standard PHP Library SPL extension in PHP before 5.3.4 on Windows does not properly detect symbolic links, which might make it easier for local users to conduct symlink attacks by leveraging cross-platform differences in the stat structure, related to lack...
Cross site scripting
The SplFileInfo::getType function in the Standard PHP Library SPL extension in PHP before 5.3.4 on Windows does not properly detect symbolic links, which might make it easier for local users to conduct symlink attacks by leveraging cross-platform differences in the stat structure, related to lack...
PHP 5.3 < 5.3.4 Multiple Vulnerabilities
Binary data 801074.prm...
PHP 5.3.x < 5.3.4 Multiple Vulnerabilities
Binary data 5732.prm...