blogsafe.org My Downloads

BlogSafe.org

PHP CVEs

Vulnerabilities in the PHP language itself, and which PHP versions they affect.

← Back to CVE list

CVE-2010-1130

MEDIUM 5.0 CVSS 2.0
Published
March 26, 2010
Last modified
June 16, 2026
NVD status
Modified
Reported by
cve@mitre.org
Weakness
CWE-264
CVSS vector
AV:N/AC:L/Au:N/C:N/I:P/A:N

Description

session.c in the session extension in PHP before 5.2.13, and 5.3.1, does not properly interpret ; (semicolon) characters in the argument to the session_save_path function, which allows context-dependent attackers to bypass open_basedir and safe_mode restrictions via an argument that contains multiple ; characters in conjunction with a .. (dot dot).

Affected products and versions

  • PHP — Up to and including 5.2.12
  • PHP versions 5.0.0, 5.0.0beta1, 5.0.0beta2, 5.0.0beta3, 5.0.0beta4, 5.0.0rc1, 5.0.0rc2, 5.0.0rc3, 5.0.1, 5.0.2, 5.0.3, 5.0.4, 5.0.5, 5.1.0, 5.1.1, 5.1.2, 5.1.3, 5.1.4, 5.1.5, 5.1.6, 5.2.0, 5.2.1, 5.2.2, 5.2.3, 5.2.4, 5.2.5, 5.2.6, 5.2.7, 5.2.8, 5.2.9, 5.2.10, 5.2.11, 5.2.13, 5.3.1

References

  • secunia.com http://secunia.com/advisories/38708 Vendor Advisory
  • securityreason.com http://securityreason.com/achievement_securityalert/82
  • securityreason.com http://securityreason.com/securityalert/7008 Exploit
  • securitytracker.com http://securitytracker.com/id?1023661
  • svn.php.net http://svn.php.net/viewvc/php/php-src/branches/PHP_5_2/ext/session/session.c?r1=293036&r2=294272
  • svn.php.net http://svn.php.net/viewvc/php/php-src/branches/PHP_5_2/ext/session/session.c?view=log
  • svn.php.net http://svn.php.net/viewvc/php/php-src/branches/PHP_5_3/ext/session/session.c?r1=293036&r2=294272
  • svn.php.net http://svn.php.net/viewvc/php/php-src/branches/PHP_5_3/ext/session/session.c?view=log
  • www.php.net http://www.php.net/ChangeLog-5.php
  • www.php.net http://www.php.net/releases/5_2_13.php Patch
  • www.vupen.com http://www.vupen.com/english/advisories/2010/0479 Vendor Advisory
  • nvd.nist.gov Official NVD record