PHP ZipArchive::extractTo() directory traversal
Published:		04.12.2008
Source:		FULL-DISCLOSURE
SecurityVulns ID:		9484
Type:		library
Level:		6/10
Description:		Directory traversal then upacking ZIP files.

Affected:

PHP : PHP 5.2

Original document

Stefan Esser, [Full-disclosure] Advisory 06/2008: PHP ZipArchive::extractTo() Directory Traversal Vulnerability (04.12.2008)

Discuss:

Read or add your comments to this news (0 comments)