CVE-2010-2476

CVE-2010-2476 affects syscp 1.4.2.1. The vulnerability allows an attacker to add arbitrary paths via the documentroot of a domain by appending a colon to it and configuring the open_basedir path to use that domain’s documentroot, enabling path manipulation. The provided documents indicate potenti...