Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 truncates a pathname upon encountering a \x00 character in certain situations, which allows remote attackers to bypass intended extension restrictions and access files or directories with unexpected names via a crafted argument to (1) set_include_path, (2) tempnam, (3) rmdir, or (4) readlink. NOTE: this vulnerability exists because of an incomplete fix for CVE-2006-7243.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
PHP 权限许可和访问控制漏洞
Vulnerability Description
PHP（PHP：Hypertext Preprocessor，PHP：超文本预处理器）是PHP Group和开放源代码社区共同维护的一种开源的通用计算机脚本语言。该语言主要用于Web开发，支持多种数据库及操作系统。 PHP中存在安全漏洞，该漏洞源于程序遇到‘x00’字节时截断路径名。远程攻击者可借助多个函数（set_include_path，tempnam，rmdir，readlink）中特制的参数利用该漏洞绕过既定的扩展限制，获取文件或目录的访问权限。以下版本受到影响：PHP 5.4.41之前版本，5.
CVSS Information
N/A
Vulnerability Type
N/A