Exploitation Summary
EIP tracks 1 public exploit for CVE-2010-1130. PoCs published by Grzegorz Stachowiak.
AI-analyzed exploit summary This exploit bypasses PHP's safe_mode restrictions by manipulating the session_save_path to write session files to arbitrary directories. It leverages path traversal to escape intended directory constraints in shared hosting environments.
Description
session.c in the session extension in PHP before 5.2.13, and 5.3.1, does not properly interpret ; (semicolon) characters in the argument to the session_save_path function, which allows context-dependent attackers to bypass open_basedir and safe_mode restrictions via an argument that contains multiple ; characters in conjunction with a .. (dot dot).
Exploits (1)
This exploit bypasses PHP's safe_mode restrictions by manipulating the session_save_path to write session files to arbitrary directories. It leverages path traversal to escape intended directory constraints in shared hosting environments.