PHP File Upload GLOBAL Variable Overwrite Vulnerability

Threat level definition

PHP File Upload GLOBAL Variable Overwrite Vulnerability

References:

ASA-2006-037 - php security update (Avaya)
PHP 4.4.1 released (PHP)
PHP 5.1.0 ChangeLog (PHP)
PHP Homepage (PHP)
Proposed 5.1 Release Announcement (PHP)
RHSA-2005:831-15 - php security update (RedHat)
RHSA-2005:838-3 - php security update (RedHat)
RHSA-2006:0549-7 - php security update for Stronghold (Red Hat)
Advisory 19/2005: PHP register_globals Activation Vulnerability in parse_str() (Stefan Esser )
Advisory 20/2005: PHP File-Upload $GLOBALS Overwrite Vulnerability (Stefan Esser )

Privacy Statement
Copyright 2008, SecurityFocus