Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
PHP before 5.2.12 and 5.3.x before 5.3.1 does not restrict the number of temporary files created when handling a multipart/form-data POST request, which allows remote attackers to cause a denial of service (resource exhaustion), and makes it easier for remote attackers to exploit local file inclusion vulnerabilities, via multiple requests, related to lack of support for the max_file_uploads directive.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
PHP 'multipart/form-data'拒绝服务漏洞
Vulnerability Description
PHP是广泛使用的通用目的脚本语言，特别适合于Web开发，可嵌入到HTML中。 在向multipart/form-data内容类型的PHP脚本发送POST请求时，如果在请求中包含了文件列表，PHP就会对该请求的每个文件创建一个临时文件。远程攻击者可以在请求中包含大量的文件，然后发送大量这类请求。服务器由于无法同时处理这些文件会停止响应。
CVSS Information
N/A
Vulnerability Type
N/A