Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2010-1130
5
MEDIUMCVSS v2
Published
March 26, 2010
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
session.c in the session extension in PHP before 5.2.13, and 5.3.1, does not properly interpret ; (semicolon) characters in the argument to the session_save_path function, which allows context-dependent attackers to bypass open_basedir and safe_mode restrictions via an argument that contains multiple ; characters in conjunction with a .. (dot dot).
phpPython Package IndexHandle some of the strange standards in PHP projects
Python Package IndexHandle some of the strange standards in PHP projects= 5.2.9, = 5.1.5, = 5.1.2, = 5.3.1, = 5.1.1, = 5.0.0, = 5.1.6, = 5.2.7, = 5.2.2, = 5.2.3, = 5.2.13, = 5.2.11, = 5.2.5, = 5.2.0, = 5.1.4, = 5.0.5, = 5.2.4, = 5.1.0, = 5.0.4, <= 5.2.12, = 5.2.6, = 5.1.3, = 5.0.3, = 5.0.1, = 5.2.1, = 5.2.8, = 5.0.2, = 5.2.10NVD