| Package | Affected versions | Patched versions |
|---|---|---|
| php | = 1.0= 2.0= 2.0b10= 3.0= 3.0.1= 3.0.10= 3.0.11= 3.0.12= 3.0.13= 3.0.2= 3.0.3= 3.0.4= 3.0.5= 3.0.6= 3.0.7= 3.0.8= 3.0.9= 4.0 |
The file upload capability in PHP versions 3 and 4 allows remote attackers to read arbitrary files by setting hidden form fields whose names match the names of internal PHP script variables.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free