CVE-2011-2202
PHP < 5.3.7 - Path Traversal and Arbitrary File Write via Multipart Form-Data Filename
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2011-2202. PoCs published by Krzysztof Kotowicz.
AI-analyzed exploit summary This exploit demonstrates a security-bypass vulnerability in PHP 5.3.6, allowing an attacker to create arbitrary files from the root directory by manipulating the filename in a multipart/form-data POST request. The vulnerability arises due to improper handling of filenames containing slashes.
Description
The rfc1867_post_handler function in main/rfc1867.c in PHP before 5.3.7 does not properly restrict filenames in multipart/form-data POST requests, which allows remote attackers to conduct absolute path traversal attacks, and possibly create or overwrite arbitrary files, via a crafted upload request, related to a "file path injection vulnerability."
Exploits (1)
This exploit demonstrates a security-bypass vulnerability in PHP 5.3.6, allowing an attacker to create arbitrary files from the root directory by manipulating the filename in a multipart/form-data POST request. The vulnerability arises due to improper handling of filenames containing slashes.