← Database

CVE-2010-1129

HIGH CVSS: 7.5 Published: 2010-03-26 Modified: 2026-06-16

Description

The safe_mode implementation in PHP before 5.2.13 does not properly handle directory pathnames that lack a trailing / (slash) character, which allows context-dependent attackers to bypass intended access restrictions via vectors related to use of the tempnam function.

Affected Platforms

Php Php

Weakness Type

CWE-20

References