The rfc1867_post_handler function in main/rfc1867.c in PHP before 5.3.7 does not properly restrict filenames in multipart/form-data POST requests, which allows remote attackers to conduct absolute path traversal attacks, and possibly create or overwrite arbitrary files, via a crafted upload request, related to a "file path injection vulnerability."

The rfc1867_post_handler function in main/rfc1867.c in PHP before 5.3.7 does not properly restrict filenames in multipart/form-data POST requests, which allows remote attackers to conduct absolute path traversal attacks, and possibly create or overwrite arbitrary files, via a crafted upload request, related to a "file path injection vulnerability."

apache2-mod_php7-7.0.14-1.4 on GA media

php: buffer over-read in Exif extension php: use-after-free vulnerability in substr_replace() php: Crash by converting serial day numbers (SDN) into Julian calendar php: Multiple memory leaks in the OpenSSL extension php: DoS when using HTTP proxy with the FTP wrapper php: DoS (excessive CPU consumption) by processing certain Zip archive files php: stack-based buffer overflow in socket_connect() php: file path injection vulnerability in RFC1867 file upload filename crypt_blowfish: 8-bit character mishandling allows different password pairs to produce the same hash