Security Advisory
CVE-2000-0860
5
Vulnerability Description
The file upload capability in PHP versions 3 and 4 allows remote attackers to read arbitrary files by setting hidden form fields whose names match the names of internal PHP script variables.
Published Date
November 14, 2000
Official Source
NIST NVD Advisory