PHP: Memory disclosure and arbitrary location file upload

Background PHP is a general-purpose scripting language widely used to develop web-based applications. It can run inside a web server using the modphp module or the CGI version of PHP, or can run stand-alone in a CLI. Description Stefano Di Paola discovered two bugs in PHP. The first is a parse...

CVE-2002-0484

moveuploadedfile in PHP does not does not check for the base directory openbasedir, which could allow remote attackers to upload files to unintended locations on the system...