| Package | Affected versions | Patched versions |
|---|---|---|
| php | = 1.0= 2.0= 2.0b10= 3.0= 3.0.1= 3.0.10= 3.0.11= 3.0.12= 3.0.13= 3.0.14= 3.0.15= 3.0.16= 3.0.17= 3.0.18= 3.0.2= 3.0.3= 3.0.4= 3.0.5= 3.0.6= 3.0.7= 3.0.8= 3.0.9= 4.0= 4.0.0= 4.0.1= 4.0.2= 4.0.3= 4.0.4= 4.0.5= 4.0.6= 4.0.7= 4.1.0= 4.1.1= 4.1.2= 4.2.0= 4.2.1= 4.2.2= 4.2.3= 4.3.0= 4.3.1= 4.3.10= 4.3.11= 4.3.2= 4.3.3= 4.3.4= 4.3.5= 4.3.6= 4.3.7= 4.3.8= 4.3.9= 4.4.0= 4.4.1= 4.4.2= 4.4.3= 4.4.4= 4.4.5= 4.4.6= 4.4.7= 4.4.8= 4.4.9= 5.0.0= 5.0.1= 5.0.2= 5.0.3= 5.0.4= 5.0.5= 5.1.0= 5.1.1= 5.1.2= 5.1.3= 5.1.4= 5.1.5= 5.1.6= 5.2.0= 5.2.1= 5.2.10= 5.2.11= 5.2.12= 5.2.13= 5.2.14= 5.2.15= 5.2.16= 5.2.17= 5.2.2= 5.2.3= 5.2.4= 5.2.5= 5.2.6= 5.2.7= 5.2.8= 5.2.9= 5.3.0= 5.3.1= 5.3.10= 5.3.11= 5.3.12= 5.3.13= 5.3.14= 5.3.15= 5.3.16= 5.3.17= 5.3.18= 5.3.19= 5.3.2= 5.3.20= 5.3.3= 5.3.4= 5.3.5= 5.3.6= 5.3.7= 5.3.8= 5.3.9= 5.4.0= 5.4.1= 5.4.10= 5.4.11= 5.4.12= 5.4.2= 5.4.3= 5.4.4= 5.4.5= 5.4.6= 5.4.7= 5.4.8= 5.4.9≤ 5.3.21 |
ext/soap/soap.c in PHP before 5.3.22 and 5.4.x before 5.4.13 does not validate the relationship between the soap.wsdl_cache_dir directive and the open_basedir directive, which allows remote attackers to bypass intended access restrictions by triggering the creation of cached SOAP WSDL files in an arbitrary directory.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free